CVE-2009-2080

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information…

published June 16, 2009

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02688 · 85.8th percentile
Published
2009-06-16T19:00Z
EPSS history
Timeline
  • 16 JUN 19:00Z
    admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information…
    cvelistv5