CVE-2009-4089: Telepark Telepark.wiki

Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days.

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or (2) delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php.

Affected products

• Telepark Telepark.wiki: version 2.4.23 only

Published 2009-11-29. Last modified 2026-06-16.