CVE

Id
41978  
CVE No.
CVE-2009-4543  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460081 41978 CVE-2009-4543 MILW0RM:9396  View
460082 41978 CVE-2009-4543 URL:http://www.milw0rm.com/exploits/9396  View
460083 41978 CVE-2009-4543 SECUNIA:36209  View
460084 41978 CVE-2009-4543 URL:http://secunia.com/advisories/36209  View
460085 41978 CVE-2009-4543 XF:facilhelpdesk-index-file-include(52362)  View
460086 41978 CVE-2009-4543 URL:http://xforce.iss.net/xforce/xfdb/52362  View
460087 41978 CVE-2009-4543 XF:facilhelpdesk-lng-file-include(52363)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39256 JVNDB-2010-005041 ViArt CMS におけるクロスサイトスクリプティングの脆弱性 ViArt CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4547 41978 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005041.html  View