CVE-2009-3180 - Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php

HIGH

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php

Published Sep 11, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.08%

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.

No remediation recorded yet.

Weaknesses (1)

CWE-255

Link	Providers	Tags
http://secunia.com/advisories/33686		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9425		exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3163		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 11, 2009

Updated Aug 7, 2024

Reserved Sep 11, 2009

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 11, 2009

Updated Aug 7, 2024

GitHub

No data