high7.5Public exploit code
CVE-2009-1652
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administ…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 2DayBiz Business Community Script - Multiple Vulnerabilities2009-05-14 · webapps · php · Verified
Impact
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2daybiz | Business Community Script | All versions |