mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-23 15:00:20 +02:00
671 B
671 B
CVE-2009-1637
Description
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters.
POC
Reference
Github
No PoCs found on GitHub currently.