CVE-2009-1767 in Template Monster Clone

요약

\~에 의해 VulDB • 2026. 07. 05.

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 예약하다: 2009. 05. 22.
• 공개: 2009. 05. 22.
• 모더레이션: 수락
• 항목: VDB-48283
• CPE: 준비됨
• CWE: CWE-264 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 5.0 (NVD)
• EPSS: 0.02084
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-1767
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-1767
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-1767/