CVE-2009-3158

Carsten Wulff Simplephpweb - Authentication Bypass

Title source: rule

Description

admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED
by SirGod · textwebappsphp
https://www.exploit-db.com/exploits/9337

Scores

EPSS 0.0368
EPSS Percentile 87.8%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

carsten_wulff/simplephpweb

Timeline

Published Sep 10, 2009
Tracked Since Feb 18, 2026