CVE-2009-4851
07.05.2010, 18:30
The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xoops | xoops | 𝑥 ≤ 2.4.0 |
| xoops | xoops | 1.0 |
| xoops | xoops | 1.0_rc1:_rc1 |
| xoops | xoops | 1.0_rc3:_rc3 |
| xoops | xoops | 1.0_rc3.0.5:_rc3.0 |
| xoops | xoops | 1.3.5 |
| xoops | xoops | 1.3.6 |
| xoops | xoops | 1.3.7 |
| xoops | xoops | 1.3.8 |
| xoops | xoops | 1.3.9 |
| xoops | xoops | 1.3.10 |
| xoops | xoops | 2.0.0 |
| xoops | xoops | 2.0.0_rc1:_rc1 |
| xoops | xoops | 2.0.0_rc2:_rc2 |
| xoops | xoops | 2.0.0_rc3:_rc3 |
| xoops | xoops | 2.0.1 |
| xoops | xoops | 2.0.2 |
| xoops | xoops | 2.0.3 |
| xoops | xoops | 2.0.4 |
| xoops | xoops | 2.0.5.1 |
| xoops | xoops | 2.0.5.2 |
| xoops | xoops | 2.0.5_rc:_rc |
| xoops | xoops | 2.0.6 |
| xoops | xoops | 2.0.7 |
| xoops | xoops | 2.0.7.1 |
| xoops | xoops | 2.0.7.2 |
| xoops | xoops | 2.0.7.3 |
| xoops | xoops | 2.0.9 |
| xoops | xoops | 2.0.9.2 |
| xoops | xoops | 2.0.9.3 |
| xoops | xoops | 2.0.10 |
| xoops | xoops | 2.0.10_rc:_rc |
| xoops | xoops | 2.0.11 |
| xoops | xoops | 2.0.12 |
| xoops | xoops | 2.0.12a:a |
| xoops | xoops | 2.0.13 |
| xoops | xoops | 2.0.13.1 |
| xoops | xoops | 2.0.13.2 |
| xoops | xoops | 2.0.14 |
| xoops | xoops | 2.0.14-rc1 |
| xoops | xoops | 2.0.15 |
| xoops | xoops | 2.0.16 |
| xoops | xoops | 2.0.17 |
| xoops | xoops | 2.0.17.1 |
| xoops | xoops | 2.0.18 |
| xoops | xoops | 2.0.18.1 |
| xoops | xoops | 2.3.0 |
| xoops | xoops | 2.3.0_alpha_3:_alpha_3 |
| xoops | xoops | 2.3.0_alpha1:_alpha1 |
| xoops | xoops | 2.3.0_alpha2:_alpha2 |
| xoops | xoops | 2.3.0_beta:_beta |
| xoops | xoops | 2.3.0_rc:_rc |
| xoops | xoops | 2.3.0_rc2:_rc2 |
| xoops | xoops | 2.3.0_rc3:_rc3 |
| xoops | xoops | 2.3.1 |
| xoops | xoops | 2.3.1_rc:_rc |
| xoops | xoops | 2.3.2a:a |
| xoops | xoops | 2.3.2b:b |
| xoops | xoops | 2.3.3 |
| xoops | xoops | 2.4.0_beta_1:_beta_1 |
| xoops | xoops | 2.4.0_beta_2:_beta_2 |
| xoops | xoops | 2.4.0_rc:_rc |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References