CVE-2009-3949

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote…

published November 16, 2009

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02199 · 82.4th percentile
Published
2009-11-16T20:00Z
EPSS history
Timeline
  • 16 NOV 20:00Z
    cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote…
    cvelistv5