CVE-2009-4674: Mole-Group Bus Ticket Script

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.

Affected products

• Mole-Group Bus Ticket Script: affected versions not specified
• Mole-Group Sky Hunter Airline Ticket Sale Script: affected versions not specified

Published 2010-03-05. Last modified 2026-06-16.