CVE-2009-1767: Medium severity 2daybiz Template Monster Clone vulnerability

Published May 22, 2009

Updated

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.

Affected Software

1 affected component

2daybiz Template Monster Clone

Event History

May 22, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1767?

CVE-2009-1767 is considered to be of high severity due to the lack of authentication allowing unauthorized account modifications.

How do I fix CVE-2009-1767?

To fix CVE-2009-1767, implement proper authentication checks in the admin/edituser.php script.

What systems are affected by CVE-2009-1767?

CVE-2009-1767 affects the 2daybiz Template Monster Clone software.

Can CVE-2009-1767 allow data breaches?

Yes, CVE-2009-1767 can lead to data breaches as it enables attackers to alter user account information.

What actions can attackers perform due to CVE-2009-1767?

Attackers can modify arbitrary user accounts by altering parameters such as loginname, password, email, firstname, or lastname.