NVD

Id
49342  
Name
CVE-2009-2080  
Description
admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator"s password via the id parameter in an editop action.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-16  
Modified Date
2009-06-17  
Seq
2009-2080  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249790 49342 CVE-2009-2080 8917  View
249791 49342 CVE-2009-2080 ticketsystem-admin-security-bypass(51029)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43731 JVNDB-2009-004738 MRCGIGUY The Ticket System の admin.php における管理者のパスワードを変更される脆弱性 MRCGIGUY The Ticket System の admin.php は、アクセス権を適切に制限しないため、以下の脆弱性が存在します。 CVE-2009-2080 39511 CVE-2009-2080 49342 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004738.html 2009-06-16 2012-09-25 View