Lucene search
HistoryMay 22, 2009 - 8:30 p.m.
CVE-2009-1780
cve-2009-1780
frax.dk
php recommend
authentication bypass
remote attackers
admin privileges
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
Affected configurations
Node
fraxphp_recommendRange≤1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| frax:php_recommend | frax php recommend | le | 1.3 |
Related
cvelist
cvelist
CVE-2009-1780
2009-05-22 20:00:00
nvd
nvd
CVE-2009-1780
2009-05-22 20:30:00
prion
prion
Authentication flaw
2009-05-22 20:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
Related for CVE-2009-1780