CVE-2009-4675

admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2010-03-05

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Gastro Portal (restaurant Directory) Script (Mole-group)

References

• http://www.exploit-db.com/exploits/8775
• http://www.securityfocus.com/bid/35079
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50723