Auth bypass in Jonijnm Com Kide
CVE-2009-4232
The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerability class: Broken Authentication
EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.
Affected products
- Jonijnm Com_kide — versions 0.4.6
- Joomla Joomla\!
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)