CVE-2009-4091: Medium severity simplog vulnerability

Published Nov 27, 2009

Updated

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.

Affected Software

1 affected component

Simplog Simplog=0.9.3.2

Event History

Nov 27, 2009

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4091?

CVE-2009-4091 is classified as a moderate severity vulnerability due to unauthorized access allowing remote attackers to edit or delete comments.

How do I fix CVE-2009-4091?

To fix CVE-2009-4091, ensure that proper access controls are enforced in the comments.php file to prevent unauthorized actions.

What systems are affected by CVE-2009-4091?

CVE-2009-4091 affects Simplog version 0.9.3.2 and possibly earlier versions.

Can CVE-2009-4091 lead to data loss?

Yes, CVE-2009-4091 can lead to data loss as attackers can delete comments without proper authorization.

How can I identify if my system is vulnerable to CVE-2009-4091?

You can identify vulnerability to CVE-2009-4091 by checking if your version of Simplog is 0.9.3.2 or earlier and assessing access controls in comments.php.