Lucene search
MitreCVE-2009-4156HistoryDec 02, 2009 - 5:30 p.m.
CVE-2009-4156
2009-12-0217:30:00
CWE-94
mitre
web.nvd.nist.gov
24
cve
2009
4156
php
remote file inclusion
vulnerability
ciamos cms
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.01
Percentile
84.1%
PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_path parameter.
Affected configurations
Node
ciamosciamos_cmsRange≤0.9.5
ORciamosciamos_cmsMatch0.9
ORciamosciamos_cmsMatch0.9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ciamos | ciamos_cms | * | cpe:2.3:a:ciamos:ciamos_cms:*:*:*:*:*:*:*:* |
| ciamos | ciamos_cms | 0.9 | cpe:2.3:a:ciamos:ciamos_cms:0.9:*:*:*:*:*:*:* |
| ciamos | ciamos_cms | 0.9.2 | cpe:2.3:a:ciamos:ciamos_cms:0.9.2:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2009-4156
2009-12-02 17:30:00
prion
prion
Remote file inclusion
2009-12-02 17:30:00
cvelist
cvelist
CVE-2009-4156
2009-12-02 17:00:00
exploitdb
exploitdb
Ciamos CMS 0.9.5 - 'module_path' Remote File Inclusion
2009-12-01 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.01
Percentile
84.1%
Related for CVE-2009-4156