VULNERABILITY INTELLIGENCE

CVE-2009-4091

CVSS score5 MEDIUM
EPSS probability6.35%
CISA KEVNot currently listed
Published2009-11-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.

Primary references