VYPR

Template Monster Clone

by 2daybiz

CVEs (1)

  • CVE-2009-1767May 22, 2009
    risk 0.03cvss epss 0.03

    admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.