CVE-2009-1652

Description

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.

Affected products

• 2daybiz / business_community_script

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/35071
• EXPLOIThttps://www.exploit-db.com/exploits/8689
• MISChttp://osvdb.org/54493
• MISChttp://www.securityfocus.com/bid/34976