CVE-2009-2080

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
mrcgiguythe_ticket_system
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/35350
https://exchange.xforce.ibmcloud.com/vulnerabilities/51029
https://www.exploit-db.com/exploits/8917
http://secunia.com/advisories/35350
https://exchange.xforce.ibmcloud.com/vulnerabilities/51029
https://www.exploit-db.com/exploits/8917