cbcvebase.

Vivaprograms Infinity Script vulnerabilities

1 known vulnerability affecting vivaprograms/infinity_script.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2009-3949P3HIGHCVSS 7.5PoC≤ 2.0.5v2.0.02009-11-16
CVE-2009-3949 [HIGH] CWE-264 CVE-2009-3949: cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentica cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters.
nvd
Vivaprograms Infinity Script vulnerabilities | cvebase