CVE-2009-4675

Published: Mar 5, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.

Affected (1)

Products: Mole Group: Gastro Portal (restaurant Directory) Script

Mole Group

1 product

Gastro Portal (restaurant Directory) Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mole Group Gastro Portal (restaurant Directory) Script	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

http://www.exploit-db.com/exploits/8775

Source: cve@mitre.org

http://www.securityfocus.com/bid/35079

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/50723

Source: cve@mitre.org

http://www.exploit-db.com/exploits/8775

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/35079

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/50723

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.