CVE-2009-4089

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• telepark wiki 2.4.23 - Multiple Vulnerabilities2009-11-16 · webapps · php · Verified
• Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)2009-08-24 · local · windows · Verified

Impact

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or (2) delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
• http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
• http://secunia.com/advisories/37391
• http://www.exploit-db.com/exploits/9483
• http://www.osvdb.org/60214
• http://www.osvdb.org/60215
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54329
• http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
• http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
• http://secunia.com/advisories/37391
• http://www.exploit-db.com/exploits/9483
• http://www.osvdb.org/60214
• http://www.osvdb.org/60215
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54329