high7.5Public exploit code
CVE-2009-4674
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modifie…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mole Group Sky Hunter/Bus Ticket Scripts - Change Admin Password2009-05-22 · webapps · php · Verified
Impact
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mole-Group | Bus Ticket Script | All versions |
| Mole-Group | Sky Hunter Airline Ticket Sale Script | All versions |