CVEvulnerability
CVE-2009-1767
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.
Affected configurations
• 2daybiz template monster clone
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/35090 Vendor Advisory
- http://www.securityfocus.com/bid/34977 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8691 www.exploit-db.com
- http://secunia.com/advisories/35090 Vendor Advisory
- http://www.securityfocus.com/bid/34977 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50561 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8691 www.exploit-db.com