mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-31 10:09:29 +02:00
706 B
706 B
CVE-2009-4874
Description
TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.
POC
Reference
- http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt
- http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt
Github
No PoCs found on GitHub currently.