CVE

Id
39690  
CVE No.
CVE-2009-2255  
Status
Candidate  
Description
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/.  
Phase
Assigned (20090629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436267 39690 CVE-2009-2255 MILW0RM:9004  View
436268 39690 CVE-2009-2255 URL:http://www.milw0rm.com/exploits/9004  View
436269 39690 CVE-2009-2255 CONFIRM:http://www.zen-cart.com/forum/attachment.php?attachmentid=5965  View
436270 39690 CVE-2009-2255 CONFIRM:http://www.zen-cart.com/forum/showthread.php?t=130161  View
436271 39690 CVE-2009-2255 BID:35467  View
436272 39690 CVE-2009-2255 URL:http://www.securityfocus.com/bid/35467  View
436273 39690 CVE-2009-2255 OSVDB:55344  View
436274 39690 CVE-2009-2255 URL:http://www.osvdb.org/55344  View
436275 39690 CVE-2009-2255 SECUNIA:35550  View
436276 39690 CVE-2009-2255 URL:http://secunia.com/advisories/35550  View
436277 39690 CVE-2009-2255 XF:zencart-recordcompany-code-execution(51316)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43767 JVNDB-2009-004774 PHP Address Book における SQL インジェクションの脆弱性 PHP Address Book には、SQL インジェクションの脆弱性が存在します。 CVE-2009-2259 39690 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004774.html  View