CVE-2009-4675

admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.exploit-db.com/exploits/8775
http://www.securityfocus.com/bid/35079
https://exchange.xforce.ibmcloud.com/vulnerabilities/50723
http://www.exploit-db.com/exploits/8775
http://www.securityfocus.com/bid/35079
https://exchange.xforce.ibmcloud.com/vulnerabilities/50723

Configurations

Configuration 1 (hide)

cpe:2.3:a:mole-group:gastro_portal_\(restaurant_directory\)_script:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-03-05 18:30

Updated : 2025-04-11 00:51

NVD link : CVE-2009-4675

Mitre link : CVE-2009-4675

CVE.ORG link : CVE-2009-4675

JSON object : View

Products Affected

mole-group

gastro_portal_\(restaurant_directory\)_script

CWE

CWE-287

Improper Authentication

{"id": "CVE-2009-4675", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-03-05T18:30:00.673", "references": [{"url": "http://www.exploit-db.com/exploits/8775", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/35079", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50723", "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/8775", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/35079", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50723", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission."}, {"lang": "es", "value": "admin/admin_info/index.php en Mole Group Gastro Portal (Restaurant Directory) Script no posee autenticacion para los permisos administrativos, lo que permite a atacantes remotos cambiar la contrase\u00f1a administrativa a traves del envio de un formulario."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mole-group:gastro_portal_\\(restaurant_directory\\)_script:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3020081A-D033-4DB7-B98E-1D0D70FF482B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}