CVE-2009-4670 | BDVDB-2026-40552 Detail

Description#

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or (2) delete arbitrary rooms via the room parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/35237
http://www.exploit-db.com/exploits/8797

Exploit#

http://www.exploit-db.com/exploits/8797

History#

Version 12010-03-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.