CVEvulnerability
CVE-2009-4091
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.
Affected configurations
• simplog simplog 0.9.3.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/21390 Vendor Advisory
- http://www.exploit-db.com/exploits/10180 www.exploit-db.com
- http://www.securityfocus.com/bid/37063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54355 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21390 Vendor Advisory
- http://www.exploit-db.com/exploits/10180 www.exploit-db.com
- http://www.securityfocus.com/bid/37063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54355 exchange.xforce.ibmcloud.com