Lucene search

MitreCVE-2009-4750

HistoryMar 26, 2010 - 8:30 p.m.

CVE-2009-4750

2010-03-2620:30:00

CWE-94

mitre

web.nvd.nist.gov

cve-2009-4750

php

remote file inclusion

top paidmailer

arbitrary code execution

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.013

Percentile

86.0%

JSON

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Affected configurations

Nvd

Node

phppowertop_paidmailer

VendorProductVersionCPE
phppowertop_paidmailer*cpe:2.3:a:phppower:top_paidmailer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phppower	top_paidmailer	*	cpe:2.3:a:phppower:top_paidmailer::::::::

References

secunia.com/advisories/35723

www.osvdb.org/55797

www.packetstormsecurity.org/0907-exploits/toppaidmailer-rfi.txt

exchange.xforce.ibmcloud.com/vulnerabilities/51661

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.013

Percentile

86.0%

JSON

Related for CVE-2009-4750