CVE

Id
39105  
CVE No.
CVE-2009-1670  
Status
Candidate  
Description
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20090518)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429421 39105 CVE-2009-1670 MILW0RM:8626  View
429422 39105 CVE-2009-1670 URL:http://www.milw0rm.com/exploits/8626  View
429423 39105 CVE-2009-1670 BID:34866  View
429424 39105 CVE-2009-1670 URL:http://www.securityfocus.com/bid/34866  View
429425 39105 CVE-2009-1670 OSVDB:54282  View
429426 39105 CVE-2009-1670 URL:http://osvdb.org/54282  View
429427 39105 CVE-2009-1670 SECUNIA:34966  View
429428 39105 CVE-2009-1670 URL:http://secunia.com/advisories/34966  View
429429 39105 CVE-2009-1670 XF:tcpdb-userpage-security-bypass(50371)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43663 JVNDB-2009-004670 Microchip MPLAB IDE におけるスタックベースのバッファオーバーフローの脆弱性 Microchip MPLAB IDE には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-1674 39105 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004670.html  View