PT-2009-6270

CVE-2009-4091

·

Published

2009-11-27

·

Updated

2017-08-17

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Simplog version 0.9.3.2
Description The issue concerns improper access restriction in comments.php, allowing remote attackers to modify or delete comments using specific actions, such as the edit or del action.
Recommendations For Simplog version 0.9.3.2, restrict access to the comments.php file to prevent unauthorized modifications or deletions of comments. Consider temporarily disabling the edit and del actions until a proper fix is applied.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾