Lucene search
HistoryFeb 20, 2009 - 6:47 a.m.
CVE-2009-0643
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.013
Percentile
85.7%
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
dminnichsimple_php_newsMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dminnich | simple_php_news | 1.0 | cpe:2.3:a:dminnich:simple_php_news:1.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-0643
2009-02-18 17:00:00
prion
prion
Code injection
2009-02-20 06:47:00
cve
cve
CVE-2009-0643
2009-02-20 06:47:48
exploitdb
exploitdb
Simple PHP News 1.0 - Remote Command Execution
2009-02-06 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.013
Percentile
85.7%
Related for NVD:CVE-2009-0643