NVD

Id
49049  
Name
CVE-2009-1780  
Description
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-22  
Modified Date
2009-05-27  
Seq
2009-1780  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248017 49049 CVE-2009-1780 8658  View
248018 49049 CVE-2009-1780 34909  View
248019 49049 CVE-2009-1780 ADV-2009-1287  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45030 JVNDB-2009-006037 Frax.dk Php Recommend の admin.php における管理者権限を取得される脆弱性 Frax.dk Php Recommend の admin.php は、ユーザパスワードが変更されている際、認証を必要としないため、管理者権限を取得される脆弱性が存在します。 CVE-2009-1780 39211 CVE-2009-1780 49049 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006037.html 2009-05-22 2012-12-20 View