CVE

Id
41847  
CVE No.
CVE-2009-4412  
Status
Candidate  
Description
Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
458955 41847 CVE-2009-4412 MLIST:[oss-security] 20091221 CVE request: Serendipity < 1.5 upload of files with *.php.* possible  View
458956 41847 CVE-2009-4412 URL:http://www.openwall.com/lists/oss-security/2009/12/21/1  View
458957 41847 CVE-2009-4412 CONFIRM:http://blog.s9y.org/archives/211-Serendipity-1.5-released.html  View
458958 41847 CVE-2009-4412 OSVDB:61245  View
458959 41847 CVE-2009-4412 URL:http://osvdb.org/61245  View
458960 41847 CVE-2009-4412 SECUNIA:37830  View
458961 41847 CVE-2009-4412 URL:http://secunia.com/advisories/37830  View
458962 41847 CVE-2009-4412 VUPEN:ADV-2009-3626  View
458963 41847 CVE-2009-4412 URL:http://www.vupen.com/english/advisories/2009/3626  View
458964 41847 CVE-2009-4412 XF:serendipity-unspecified-file-upload(54985)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45564 JVNDB-2009-006571 phpGroupWare の login.php におけるクロスサイトスクリプティングの脆弱性 phpGroupWare の login.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4416 41847 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006571.html  View