CVE

Id
37876  
CVE No.
CVE-2009-0441  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411475 37876 CVE-2009-0441 MILW0RM:7965  View
411476 37876 CVE-2009-0441 URL:http://www.milw0rm.com/exploits/7965  View
411477 37876 CVE-2009-0441 BID:33592  View
411478 37876 CVE-2009-0441 URL:http://www.securityfocus.com/bid/33592  View
411479 37876 CVE-2009-0441 OSVDB:51740  View
411480 37876 CVE-2009-0441 URL:http://osvdb.org/51740  View
411481 37876 CVE-2009-0441 SECUNIA:33732  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42222 JVNDB-2009-003229 Dreampics Gallery Builder の index.php における SQL インジェクションの脆弱性 Dreampics Gallery Builder の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0445 37876 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003229.html  View