Vulnerability in Mole-Group Bus Ticket Script

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

Affected products

Mole-group Bus_ticket_script
Mole-group Sky_hunter_airline_ticket_sale_script
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)