CVE

Id
40171  
CVE No.
CVE-2009-2736  
Status
Candidate  
Description
Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a setconfig action.  
Phase
Assigned (20090810)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
441720 40171 CVE-2009-2736 MILW0RM:9371  View
441721 40171 CVE-2009-2736 URL:http://www.milw0rm.com/exploits/9371  View
441722 40171 CVE-2009-2736 OSVDB:56813  View
441723 40171 CVE-2009-2736 URL:http://osvdb.org/56813  View
441724 40171 CVE-2009-2736 SECUNIA:36154  View
441725 40171 CVE-2009-2736 URL:http://secunia.com/advisories/36154  View
441726 40171 CVE-2009-2736 VUPEN:ADV-2009-2168  View
441727 40171 CVE-2009-2736 URL:http://www.vupen.com/english/advisories/2009/2168  View
441728 40171 CVE-2009-2736 XF:opennews-admin-sql-injection(52289)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41620 JVNDB-2009-002627 CA Host-Based Intrusion Prevention System の kmxIds.sys におけるサービス運用妨害 (DoS) の脆弱性 CA Host-Based Intrusion Prevention System (HIPS) の kmxIds.sys には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2740 40171 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002627.html  View