CVE

Id
41533  
CVE No.
CVE-2009-4098  
Status
Candidate  
Description
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an images directory.  
Phase
Assigned (20091128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
456268 41533 CVE-2009-4098 BUGTRAQ:20091124 Executing arbitrary PHP code on OpenX <= 2.8.1  View
456269 41533 CVE-2009-4098 URL:http://www.securityfocus.com/archive/1/archive/1/508050/100/0/threaded  View
456270 41533 CVE-2009-4098 MISC:https://developer.openx.org/jira/browse/OX-5747  View
456271 41533 CVE-2009-4098 CONFIRM:http://www.openx.org/docs/2.8/release-notes/openx-2.8.2  View
456272 41533 CVE-2009-4098 BID:37110  View
456273 41533 CVE-2009-4098 URL:http://www.securityfocus.com/bid/37110  View
456274 41533 CVE-2009-4098 OSVDB:60499  View
456275 41533 CVE-2009-4098 URL:http://osvdb.org/60499  View
456276 41533 CVE-2009-4098 SECUNIA:37475  View
456277 41533 CVE-2009-4098 URL:http://secunia.com/advisories/37475  View
456278 41533 CVE-2009-4098 XF:openx-banneredit-upload(54394)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30722 JVNDB-2011-000070 Sage において任意のスクリプトが実行される脆弱性 Sage には任意のスクリプトが実行される脆弱性が存在します。 CVE-2009-4102 41533 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000070.html  View