CVE-2009-4670

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or…

published March 5, 2010

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or (2) delete arbitrary rooms via the room parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02252 · 82.8th percentile
Published
2010-03-05T18:00Z
EPSS history
Timeline
  • 05 MAR 18:00Z
    admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or…
    cvelistv5