CVE-2009-4232

Kide Shoutbox (com_kide) <0.4.6 - Auth Bypass

Title source: llm

Description

The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (1)

[Vendor Advisory] http://secunia.com/advisories/37508

Scores

EPSS 0.0027

EPSS Percentile 49.9%

Classification

CWE

CWE-287

Status draft

Affected Products (1)

jonijnm/com_kide

Timeline

Published Dec 08, 2009

Tracked Since Feb 18, 2026