Lucene search
K

CVE-2009-0545

🗓️ 12 Feb 2009 23:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 85 Views🌐 WEB

ZeroShell 1.0beta11 allows remote command execution via shell metacharacters

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2009-0545 — ZeroShell Remote Code Execution
12 Feb 200900:00
attackerkb
Circl
CVE-2009-0545
9 Feb 200900:00
circl
Check Point Advisories
Zeroshell type Parameter Command Execution (CVE-2009-0545)
27 Apr 202100:00
checkpoint_advisories
Cvelist
CVE-2009-0545
12 Feb 200923:00
cvelist
Metasploit
ZeroShell Remote Code Execution
22 Sep 201308:13
metasploit
Nuclei
ZeroShell <= 1.0beta11 Remote Code Execution
19 Jun 202611:10
nuclei
NVD
CVE-2009-0545
12 Feb 200923:30
nvd
OpenVAS
ZeroShell <= 1.0beta11 RCE Vulnerability - Active Check
19 Oct 202000:00
openvas
Prion
Deserialization of untrusted data
12 Feb 200923:30
prion
VulnCheck KEV
VulnCheck KEV: CVE-2009-0545
13 Jun 201900:00
vulncheck_kev
Rows per page
NVD
Node
zeroshellzeroshellMatch1.0beta1
OR
zeroshellzeroshellMatch1.0beta10
OR
zeroshellzeroshellMatch1.0beta11
OR
zeroshellzeroshellMatch1.0beta2
OR
zeroshellzeroshellMatch1.0beta3
OR
zeroshellzeroshellMatch1.0beta4
OR
zeroshellzeroshellMatch1.0beta5
OR
zeroshellzeroshellMatch1.0beta6
OR
zeroshellzeroshellMatch1.0beta7
OR
zeroshellzeroshellMatch1.0beta8
OR
zeroshellzeroshellMatch1.0beta9
ParameterPositionPathDescriptionCWE
Sectionquery paramcgi-bin/kerbynetUnauthenticated local file inclusion to read /var/register/system/ldap/rootpw via NoAuthREQ Render Object parameterCWE-20
Actionquery paramcgi-bin/kerbynetUnauthenticated local file inclusion to read /var/register/system/ldap/rootpw via NoAuthREQ Render Object parameterCWE-20
Objectquery paramcgi-bin/kerbynetUnauthenticated local file inclusion to read /var/register/system/ldap/rootpw via NoAuthREQ Render Object parameterCWE-20
Actionrequest bodycgi-bin/kerbynetLogin using retrieved admin password (StartSessionSubmit) to obtain a session keyCWE-20
Userrequest bodycgi-bin/kerbynetLogin using retrieved admin password (StartSessionSubmit) to obtain a session keyCWE-20
PWrequest bodycgi-bin/kerbynetLogin using retrieved admin password (StartSessionSubmit) to obtain a session keyCWE-20
Actionrequest bodycgi-bin/kerbynetRunScript action to execute payload with root privileges using obtained session keyCWE-20
Sectionrequest bodycgi-bin/kerbynetRunScript action to execute payload with root privileges using obtained session keyCWE-20
STkrequest bodycgi-bin/kerbynetRunScript action to execute payload with root privileges using obtained session keyCWE-20
ScriptNamerequest bodycgi-bin/kerbynetRunScript action to execute payload with root privileges using obtained session keyCWE-20
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:05Current
7.8High risk
Vulners AI Score7.8
CVSS 210
EPSS0.90732
85