NVD

Id
47939  
Name
CVE-2009-0610  
Description
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the (1) title or (2) date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-17  
Modified Date
2009-02-18  
Seq
2009-0610  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42246 JVNDB-2009-003253 Simple PHP News の post.php における news.txt へ任意の PHP コードを挿入される脆弱性 Simple PHP News の post.php は、news.txt へ任意の PHP コードを挿入される、およびコードを実行される脆弱性が存在します。 CVE-2009-0610 38041 CVE-2009-0610 47939 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003253.html 2009-02-17 2012-06-26 View