Vulnerability in Simplog
CVE-2009-4091
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.
EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.
Affected products
- Simplog — versions 0.9.3.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2009-4091?
- CVE-2009-4091 is a vulnerability in Simplog, classified under CWE-264. Published 2009-11-29.
- Is CVE-2009-4091 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.