Lucene search

[email protected]CVE-2009-0372

HistoryJan 30, 2009 - 7:30 p.m.

CVE-2009-0372

2009-01-3019:30:00

CWE-20

[email protected]

web.nvd.nist.gov

vulnerability

file upload

miltenovik manojlo memht portal

cve-2009-0372

nvd

remote code execution

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.

Affected configurations

NVD

Node

memhtmemht_portalRange≤4.0.1

memhtmemht_portalMatch1.0final

memhtmemht_portalMatch1.5full

memhtmemht_portalMatch1.5update

memhtmemht_portalMatch2.0full

memhtmemht_portalMatch2.0update

memhtmemht_portalMatch2.5full

memhtmemht_portalMatch2.5update

memhtmemht_portalMatch2.9full

memhtmemht_portalMatch2.9update

memhtmemht_portalMatch3.0full

memhtmemht_portalMatch3.0update

memhtmemht_portalMatch3.1

memhtmemht_portalMatch3.1full

memhtmemht_portalMatch3.1update

memhtmemht_portalMatch3.2update

memhtmemht_portalMatch3.3full

memhtmemht_portalMatch3.3update

memhtmemht_portalMatch3.4

memhtmemht_portalMatch3.4full

memhtmemht_portalMatch3.4update

memhtmemht_portalMatch3.4.5

memhtmemht_portalMatch3.4.5full

memhtmemht_portalMatch3.4.5update

memhtmemht_portalMatch3.5.0full

memhtmemht_portalMatch3.6.0

memhtmemht_portalMatch3.6.5

memhtmemht_portalMatch3.7.0

memhtmemht_portalMatch3.7.5

memhtmemht_portalMatch3.8.0

memhtmemht_portalMatch3.8.1

memhtmemht_portalMatch3.8.5

memhtmemht_portalMatch3.9.0

CPENameOperatorVersion
memht:memht_portalmemht memht portalle4.0.1
memht:memht_portalmemht memht portaleq1.0
memht:memht_portalmemht memht portaleq1.5
memht:memht_portalmemht memht portaleq2.0
memht:memht_portalmemht memht portaleq2.5
memht:memht_portalmemht memht portaleq2.9
memht:memht_portalmemht memht portaleq3.0
memht:memht_portalmemht memht portaleq3.1
memht:memht_portalmemht memht portaleq3.2
memht:memht_portalmemht memht portaleq3.3

CPE	Name	Operator	Version
memht:memht_portal	memht memht portal	le	4.0.1
memht:memht_portal	memht memht portal	eq	1.0
memht:memht_portal	memht memht portal	eq	1.5
memht:memht_portal	memht memht portal	eq	2.0
memht:memht_portal	memht memht portal	eq	2.5
memht:memht_portal	memht memht portal	eq	2.9
memht:memht_portal	memht memht portal	eq	3.0
memht:memht_portal	memht memht portal	eq	3.1
memht:memht_portal	memht memht portal	eq	3.2
memht:memht_portal	memht memht portal	eq	3.3

Rows per page:

1-10 of 211

References

secunia.com/advisories/33626

www.securityfocus.com/bid/33424

exchange.xforce.ibmcloud.com/vulnerabilities/48199

www.exploit-db.com/exploits/7859

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Related for CVE-2009-0372

prion1 cvelist1 nvd1