CVE-2009-4091 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 6.4% (pctl 93)
Patch early
A public exploit exists.
Description
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| EPSS | 6.35% — more likely to be exploited than 93% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-11-29 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| simplog | simplog |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Simplog 0.9.3.2 - Multiple Vulnerabilities | 2009-11-16 |
References
- http://secunia.com/advisories/21390
- http://www.exploit-db.com/exploits/10180
- http://www.securityfocus.com/bid/37063
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54355
- http://secunia.com/advisories/21390
- http://www.exploit-db.com/exploits/10180
- http://www.securityfocus.com/bid/37063
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54355
→ the Explorer · watch your stack · NVD