CVE-2009-5025

ALTO 7.5CVE-2009-5025 · Published 15/01/2020 · updated 16/06/2026

In breve

CVE-2009-5025 è una vulnerabilità ALTO (CVSS 7.5) che riguarda pyforum (pyforum project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 79.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pyforum pyforum_project	`= 1.0.3`	No fix yet

Description

A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.

References

packetstormsecurity.com/files/cve/CVE-2009-5025 · Third Party Advisory
seclists.org/fulldisclosure/2009/Nov/353 · Mailing List
openwall.com/lists/oss-security/2011/07/26/7 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free