CVE-2009-1767
MEDIUM 5.0EPSS 2.1%
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 2.08% chance of exploitation in the next 30 days, 81st percentile
- Published
- 2009-05-22
- Updated
- 2024-08-07