Unrated severityNVD Advisory· Published May 22, 2009· Updated Jun 16, 2026
CVE-2009-1780
CVE-2009-1780
Description
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*range: <=1.3
- (no CPE)range: <=1.3
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/34909nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/8658nvdExploitThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2009/1287nvdPermissions Required
News mentions
0No linked articles in our index yet.