CVE

Id
41976  
CVE No.
CVE-2009-4541  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) newticket.php or (2) rempass.php, or a URL in the lang parameter in an adduser action to (3) index.php. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460061 41976 CVE-2009-4541 MILW0RM:9397  View
460062 41976 CVE-2009-4541 URL:http://www.milw0rm.com/exploits/9397  View
460063 41976 CVE-2009-4541 BID:35997  View
460064 41976 CVE-2009-4541 URL:http://www.securityfocus.com/bid/35997  View
460065 41976 CVE-2009-4541 OSVDB:56869  View
460066 41976 CVE-2009-4541 URL:http://osvdb.org/56869  View
460067 41976 CVE-2009-4541 OSVDB:56870  View
460068 41976 CVE-2009-4541 URL:http://osvdb.org/56870  View
460069 41976 CVE-2009-4541 OSVDB:56871  View
460070 41976 CVE-2009-4541 URL:http://osvdb.org/56871  View
460071 41976 CVE-2009-4541 SECUNIA:36208  View
460072 41976 CVE-2009-4541 URL:http://secunia.com/advisories/36208  View
460073 41976 CVE-2009-4541 XF:supportcenter-index-file-include(52352)  View
460074 41976 CVE-2009-4541 URL:http://xforce.iss.net/xforce/xfdb/52352  View
460075 41976 CVE-2009-4541 XF:supportcenter-lang-file-include(52350)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38544 JVNDB-2010-004329 Logoshows BBS におけるデータベースをダウンロードされる脆弱性 Logoshows BBS は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2009-4545 41976 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004329.html  View