← Database

CVE-2009-4674

HIGH CVSS: 7.5 Published: 2010-03-05 Modified: 2026-06-16

Description

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.

Affected Platforms

Mole-Group Bus Ticket ScriptMole-Group Sky Hunter Airline Ticket Sale Script

Weakness Type

CWE-255

References