CVE

Id
38895  
CVE No.
CVE-2009-1460  
Status
Candidate  
Description
razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator"s password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact.  
Phase
Assigned (20090428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
427154 38895 CVE-2009-1460 FULLDISC:20090416 [follow-up] razorCMS - Multiple Vulnerabilities  View
427155 38895 CVE-2009-1460 URL:http://marc.info/?l=full-disclosure&m=123998062108561&w=2  View
427156 38895 CVE-2009-1460 FULLDISC:20090416 razorCMS - Multiple Vulnerabilities  View
427157 38895 CVE-2009-1460 URL:http://marc.info/?l=full-disclosure&m=123990481506680&w=2  View
427158 38895 CVE-2009-1460 CONFIRM:http://razorcms.co.uk/support/viewtopic.php?f=13&t=325  View
427159 38895 CVE-2009-1460 BID:34566  View
427160 38895 CVE-2009-1460 URL:http://www.securityfocus.com/bid/34566  View
427161 38895 CVE-2009-1460 OSVDB:53777  View
427162 38895 CVE-2009-1460 URL:http://osvdb.org/53777  View
427163 38895 CVE-2009-1460 SECUNIA:34744  View
427164 38895 CVE-2009-1460 URL:http://secunia.com/advisories/34744  View
427165 38895 CVE-2009-1460 XF:razorcms-adminconfig-info-disclosure(49946)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43604 JVNDB-2009-004611 A-A-S の index.aas におけるクロスサイトリクエストフォージェリの脆弱性 Application Access Server (A-A-S) の index.aas には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-1464 38895 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004611.html  View