NVD

Id
47972  
Name
CVE-2009-0643  
Description
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-20  
Modified Date
2011-03-07  
Seq
2009-0643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240509 47972 CVE-2009-0643 7999  View
240510 47972 CVE-2009-0643 ADV-2009-0357  View
240511 47972 CVE-2009-0643 simplephpnews-news-code-execution(48829)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42247 JVNDB-2009-003254 Simple PHP News の post.php における news.txt へ任意の PHP コードを挿入される脆弱性 Simple PHP News の post.php には、ews.txt へ任意の PHP コードを挿入される、およびコードを実行される脆弱性が存在します。 CVE-2009-0643 38074 CVE-2009-0643 47972 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003254.html 2009-02-20 2012-06-26 View