CVE-2009-4091

EUVD-2009-4062
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
simplogsimplog
0.9.3.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/21390
http://www.exploit-db.com/exploits/10180
http://www.securityfocus.com/bid/37063
https://exchange.xforce.ibmcloud.com/vulnerabilities/54355
http://secunia.com/advisories/21390
http://www.exploit-db.com/exploits/10180
http://www.securityfocus.com/bid/37063
https://exchange.xforce.ibmcloud.com/vulnerabilities/54355