comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Simplog | Simplog | 0.9.3.2 (including) | 0.9.3.2 (including) |