CVE-2009-4874

Loading...

General

Score:6.4/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:None

Published on 26/05/10 - Updated on 19/09/17

Description

TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2009-4874

Exploits

Exploit-DBEDB-9095
SecurityFocusBID-35619

Relative technologies

VendorProduct
scripts.oldguytalkback

Share this vulnerability with:

Twitter Facebook LinkedIn Mail