CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows…

published May 7, 2010

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01209 · 68.2th percentile
Published
2010-05-07T18:23Z
EPSS history
Timeline
  • 07 MAY 18:23Z
    The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows…
    cvelistv5