CVE-2009-1670
TCPDB 3.8 - Unauthenticated Admin Account Creation via user/index.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1670. PoCs published by Mr.tro0oqy.
AI-analyzed exploit summary This is a technical writeup describing an authentication bypass vulnerability in TCPDB version 3.8, allowing an attacker to add an admin user via a specific URL path. The exploit involves navigating to a user management page and manually adding an admin account.
Description
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information.
Exploits (1)
This is a technical writeup describing an authentication bypass vulnerability in TCPDB version 3.8, allowing an attacker to add an admin user via a specific URL path. The exploit involves navigating to a user management page and manually adding an admin account.