CVE

Id
39371  
CVE No.
CVE-2009-1936  
Status
Candidate  
Description
_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500.  
Phase
Assigned (20090605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
433666 39371 CVE-2009-1936 MILW0RM:8790  View
433667 39371 CVE-2009-1936 URL:http://www.milw0rm.com/exploits/8790  View
433668 39371 CVE-2009-1936 BID:35103  View
433669 39371 CVE-2009-1936 URL:http://www.securityfocus.com/bid/35103  View
433670 39371 CVE-2009-1936 SECUNIA:35245  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43695 JVNDB-2009-004702 Joomla! 用の com_users コアコンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 Joomla! 用の com_users コアコンポーネントの管理者パネルには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-1940 39371 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004702.html  View