high7.5Public exploit code
CVE-2009-3158
admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown ve…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- simplePHPWeb 0.2 - 'files.php' Authentication Bypass2009-08-03 · webapps · php · Verified
Impact
admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carsten Wulff | Simplephpweb | Version 0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9337
- http://www.vupen.com/english/advisories/2009/2129
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52215
- http://www.exploit-db.com/exploits/9337
- http://www.vupen.com/english/advisories/2009/2129
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52215