CVE-2009-1637

EPSS 2.2%

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/8638unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/54280 http://secunia.com/advisories/35030 https://exchange.xforce.ibmcloud.com/vulnerabilities/50379 https://www.exploit-db.com/exploits/8638 http://www.securityfocus.com/bid/34872