high7.5Public exploit code
CVE-2009-1670
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TCPDB 3.8 - Arbitrary Add Admin Account2009-05-07 · webapps · php · Verified
Impact
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tcpdb | Tcpdb | Version 3.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/54282
- http://secunia.com/advisories/34966
- http://www.securityfocus.com/bid/34866
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50371
- https://www.exploit-db.com/exploits/8626
- http://osvdb.org/54282
- http://secunia.com/advisories/34966
- http://www.securityfocus.com/bid/34866
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50371
- https://www.exploit-db.com/exploits/8626