CVE-2009-1767: 2daybiz Template Monster Clone

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter.

Affected products

• 2daybiz Template Monster Clone: affected versions not specified

Published 2009-05-22. Last modified 2026-06-16.