high7.5Public exploit code
CVE-2009-1780
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain adm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection2009-05-11 · webapps · php · Verified
Impact
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frax | Php Recommend | through 1.3 |