CVE-2009-4876

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-05-26

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Netrix Cms (Netrix)

References

• http://osvdb.org/56008
• http://secunia.com/advisories/35891
• http://www.exploit-db.com/exploits/9203
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51846