Lucene search
MitreCVE-2009-1452HistoryApr 28, 2009 - 4:30 p.m.
CVE-2009-1452
2009-04-2816:30:03
CWE-94
mitre
web.nvd.nist.gov
31
php
remote file inclusion
vulnerability
sma-db 0.3.13
cve-2009-1452
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.023
Percentile
89.6%
Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450.
Affected configurations
Node
bluevirus-designsma-dbMatch0.3.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bluevirus-design | sma-db | 0.3.13 | cpe:2.3:a:bluevirus-design:sma-db:0.3.13:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-1452
2009-04-28 16:00:00
CVE-2009-1450
2009-04-28 15:00:00
prion
prion
Remote file inclusion
2009-04-28 16:30:00
Remote file inclusion
2009-04-28 15:30:00
nvd
nvd
CVE-2009-1452
2009-04-28 16:30:03
CVE-2009-1450
2009-04-28 15:30:00
exploitdb
exploitdb
SMA-DB 0.3.13 - Multiple Remote File Inclusions
2009-04-16 00:00:00
sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting
2009-02-02 00:00:00
cve
cve
CVE-2009-1450
2009-04-28 15:30:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.023
Percentile
89.6%
Related for CVE-2009-1452