CVE-2009-1767 | BDVDB-2026-36697 Detail

Description#

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/34977
http://secunia.com/advisories/35090
https://www.exploit-db.com/exploits/8691
https://exchange.xforce.ibmcloud.com/vulnerabilities/50561

Exploit#

https://www.exploit-db.com/exploits/8691

History#

Version 12009-05-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.