CVE-2009-2960

Опубликовано: 25 авг. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request.

Ссылки

http://secunia.com/advisories/36349
Vendor Advisory
http://www.securityfocus.com/archive/1/506000/100/0/threaded
http://www.securityfocus.com/bid/36099
Exploit
http://secunia.com/advisories/36349
Vendor Advisory
http://www.securityfocus.com/archive/1/506000/100/0/threaded
http://www.securityfocus.com/bid/36099
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cuteflow:cuteflow:2.10.3:*:*:*:*:*:*:*

cpe:2.3:a:cuteflow:cuteflow:2.11.0_c:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01698

Низкий

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2009-2960

debian

больше 16 лет назад

CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to page ...

GHSA-mfxg-gv98-v84v

github

почти 4 года назад