Vulnerability Description
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| 2Daybiz | Template Monster Clone | - |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/35090Vendor Advisory
- http://www.securityfocus.com/bid/34977Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
- https://www.exploit-db.com/exploits/8691
- http://secunia.com/advisories/35090Vendor Advisory
- http://www.securityfocus.com/bid/34977Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
- https://www.exploit-db.com/exploits/8691
FAQ
What is CVE-2009-1767?
CVE-2009-1767 is a vulnerability with a CVSS score of 5.0 (MEDIUM). admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3)...
How severe is CVE-2009-1767?
CVE-2009-1767 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-1767?
Check the references section above for vendor advisories and patch information. Affected products include: 2Daybiz Template Monster Clone.