CVE-2009-1670

EPSS 6.9%

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/8626unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/54282 http://secunia.com/advisories/34966 https://exchange.xforce.ibmcloud.com/vulnerabilities/50371 https://www.exploit-db.com/exploits/8626 http://www.securityfocus.com/bid/34866