What’s Vulnerable › Vulnerabilities
CVE-2009-1752
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-05-22 · updated 2026-06-16
- Weakness: CWE-264
Description
exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which allows remote attackers to gain privileges a direct request. NOTE: some of these details are obtained from third party information.
Affected products
References
- http://secunia.com/advisories/35172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50647
- https://www.exploit-db.com/exploits/8744
- http://secunia.com/advisories/35172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50647
- https://www.exploit-db.com/exploits/8744
Get alerted when CVE-2009-1752 or the next vulnerability affects your stack