CVE-2009-2080 | BDVDB-2026-37056 Detail

Description#

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/51029
http://secunia.com/advisories/35350
https://www.exploit-db.com/exploits/8917

Exploit#

https://www.exploit-db.com/exploits/8917

History#

Version 12009-06-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.