CVE-2009-4851 - The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php

Back Back to CVE browser

MEDIUM

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php

Published May 7, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 1.21%

Description

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://secunia.com/advisories/37274
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2009/3256
vdb-entryx_refsource_VUPENVendor Advisory
http://www.xoops.org/modules/newbb/viewtopic.php?post_id=319132
x_refsource_MISC
http://www.xoops.org/modules/news/article.php?storyid=5096
x_refsource_CONFIRMPatch

Link	Providers	Tags
http://secunia.com/advisories/37274		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2009/3256		vdb-entryx_refsource_VUPENVendor Advisory
http://www.xoops.org/modules/newbb/viewtopic.php?post_id=319132		x_refsource_MISC
http://www.xoops.org/modules/news/article.php?storyid=5096		x_refsource_CONFIRMPatch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 7, 2010

Updated Sep 16, 2024

Reserved May 7, 2010

Link CVE-2009-4851

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4851

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-4851