NVD

Id
50940  
Name
CVE-2009-3760  
Description
Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into include/config.ini.php via the pool1 parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-10-22  
Modified Date
2009-10-23  
Seq
2009-3760  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257966 50940 CVE-2009-3760 http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt  View
257967 50940 CVE-2009-3760 1022520  View
257968 50940 CVE-2009-3760 9106  View
257969 50940 CVE-2009-3760 20090707 Citrix XenCenterWeb Multiple Vulnerabilities  View
257970 50940 CVE-2009-3760 35592  View
257971 50940 CVE-2009-3760 ADV-2009-1814  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41541 JVNDB-2009-002548 Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性 Citrix XenCenterWeb の XenServer Resource Kit 内にあるサンプルコードの config/writeconfig.php には、PHP コードを挿入される脆弱性が存在します。 CVE-2009-3760 41191 CVE-2009-3760 50940 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002548.html 2009-10-22 2010-09-14 View