PT-2010-1748 · Adpeeps · Adpeeps

Published 2010-07-22 · Updated 2018-10-10 · CVE-2009-4945

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AdPeeps version 8.5d1

Description The issue allows remote attackers to gain access due to a default password set to admin for the admin account. This can be exploited via requests to "index.php".

Recommendations For AdPeeps version 8.5d1, change the default password of the admin account to a strong and unique password to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4945

Affected Products

Adpeeps

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-4945 · Security Note
• http://securityfocus.com/archive/1/503911/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4945 · Note
• http://forum.intern0t.net/intern0t-advisories/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html · Note
• http://securityfocus.com/archive/1/503855/100/0/threaded · Note