CVE-2009-1582

EPSS 2.8%

Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/8605unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/54204 http://secunia.com/advisories/34994 https://exchange.xforce.ibmcloud.com/vulnerabilities/50306 https://www.exploit-db.com/exploits/8605 http://www.securityfocus.com/bid/34809