cve/2009/CVE-2009-4874.md

CVE-2009-4874

Description

TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

POC

Reference

• http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt

Github

No PoCs found on GitHub currently.