CVE-2009-1652: High severity 2daybiz Business Community Script vulnerability
Published May 16, 2009
·Updated
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.
Affected Software
1 affected component
2daybiz Business Community Script
Event History
May 16, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1652?
CVE-2009-1652 has a high severity rating due to its ability to allow unauthorized access and privilege escalation.
2
How do I fix CVE-2009-1652?
To mitigate CVE-2009-1652, implement proper access controls to restrict direct access to admin/adminaddeditdetails.php.
3
What are the potential impacts of CVE-2009-1652?
Exploitation of CVE-2009-1652 can lead to unauthorized user accounts being created, allowing for potential takeover of the application.
4
Is CVE-2009-1652 still a relevant threat?
Yes, CVE-2009-1652 may still pose a significant threat to unpatched versions of Business Community Script.
5
What systems are affected by CVE-2009-1652?
CVE-2009-1652 affects the Business Community Script developed by 2daybiz.