← Database

CVE-2009-1652

HIGH CVSS: 7.5 Published: 2009-05-16 Modified: 2026-06-16

Description

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.

Affected Platforms

2Daybiz Business Community Script

Weakness Type

CWE-264

References