CVEvulnerability
CVE-2009-4465
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in (1) templates/ including (2) templates/deluxe/admincp/, (3) templates/corporate/admincp/, and (4) templates/blue/admincp/; (5) images/; (6) logs/ including (7) logs/cp.php; (8) wysiwyg/; (9) docs/; (10) classes/; (11) lang/; and (12) settings/.
Affected configurations
• deluxebb deluxebb 1.3
Related
Weakness · not in database (1)
References
- http://www.exploit-db.com/exploits/10598 Exploit
- http://www.securityfocus.com/bid/37448 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54975 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54977 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54978 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/10598 Exploit
- http://www.securityfocus.com/bid/37448 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54975 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54977 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54978 exchange.xforce.ibmcloud.com