CVE-2009-1637

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and…

published May 15, 2009

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02247 · 82.8th percentile
Published
2009-05-15T15:00Z
EPSS history
Timeline
  • 15 MAY 15:00Z
    profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and…
    cvelistv5