CVE-2009-1767

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-22 · updated 2026-06-16
Weakness: CWE-264

Description

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.

Affected products

2Daybiz Template Monster Clone: all versions

References

http://secunia.com/advisories/35090
http://www.securityfocus.com/bid/34977
https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
https://www.exploit-db.com/exploits/8691
http://secunia.com/advisories/35090
http://www.securityfocus.com/bid/34977
https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
https://www.exploit-db.com/exploits/8691

Get alerted when CVE-2009-1767 or the next vulnerability affects your stack