CVE-2009-4874: Scripts.oldguy Talkback

Medium severity, CVSS 6.4. EPSS: 2.6% chance of exploitation in the next 30 days.

TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.

Affected products

• Scripts.oldguy Talkback: version 2.3.14 only

Published 2010-05-26. Last modified 2026-06-16.