← Back

Infinity Script

infinity_script

Vendor: Vivaprograms • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3949
1Vivaprograms
1Infinity Script
Apr 23, 2026
Nov 16, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password,...Show more
cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters.Show less