Lucene search
MitreCVE-2009-2143HistoryJun 22, 2009 - 2:30 p.m.
CVE-2009-2143
2009-06-2214:30:00
CWE-94
mitre
web.nvd.nist.gov
30
cve-2009-2143
php
remote file inclusion
vulnerability
firestats
wordpress
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.007
Percentile
80.6%
PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.
Affected configurations
Node
wordpresswordpress
firestatsfirestatsRange≤1.6.1stable
ORfirestatsfirestatsMatch0.9.0-beta
ORfirestatsfirestatsMatch0.9.1-beta
ORfirestatsfirestatsMatch0.9.2-beta
ORfirestatsfirestatsMatch0.9.3-beta
ORfirestatsfirestatsMatch0.9.4-beta
ORfirestatsfirestatsMatch0.9.5-beta
ORfirestatsfirestatsMatch0.9.6-beta
ORfirestatsfirestatsMatch0.9.7-beta
ORfirestatsfirestatsMatch0.9.8-beta
ORfirestatsfirestatsMatch0.9.9
ORfirestatsfirestatsMatch1.0
ORfirestatsfirestatsMatch1.0.0rc1
ORfirestatsfirestatsMatch1.0.1rc2
ORfirestatsfirestatsMatch1.0.2rc3
ORfirestatsfirestatsMatch1.0.2stable
ORfirestatsfirestatsMatch1.1.1rc1
ORfirestatsfirestatsMatch1.1.2rc2
ORfirestatsfirestatsMatch1.1.3rc3
ORfirestatsfirestatsMatch1.1.3rc4
ORfirestatsfirestatsMatch1.1.4rc5
ORfirestatsfirestatsMatch1.1.5stable
ORfirestatsfirestatsMatch1.1.6stable
ORfirestatsfirestatsMatch1.1.7stable
ORfirestatsfirestatsMatch1.1.8stable
ORfirestatsfirestatsMatch1.2.0-beta
ORfirestatsfirestatsMatch1.2.1rc1
ORfirestatsfirestatsMatch1.2.2rc2
ORfirestatsfirestatsMatch1.2.3rc3
ORfirestatsfirestatsMatch1.2.4stable
ORfirestatsfirestatsMatch1.3.0-beta
ORfirestatsfirestatsMatch1.3.1-beta
ORfirestatsfirestatsMatch1.3.2-beta
ORfirestatsfirestatsMatch1.3.3-beta
ORfirestatsfirestatsMatch1.3.4rc1
ORfirestatsfirestatsMatch1.3.5rc2
ORfirestatsfirestatsMatch1.3.6stabe
ORfirestatsfirestatsMatch1.4
ORfirestatsfirestatsMatch1.4.0-beta
ORfirestatsfirestatsMatch1.4.1-beta
ORfirestatsfirestatsMatch1.4.2-beta
ORfirestatsfirestatsMatch1.4.3rc1
ORfirestatsfirestatsMatch1.4.4stable
ORfirestatsfirestatsMatch1.5
ORfirestatsfirestatsMatch1.5.0-beta
ORfirestatsfirestatsMatch1.5.1-beta
ORfirestatsfirestatsMatch1.5.2-beta
ORfirestatsfirestatsMatch1.5.3rc1
ORfirestatsfirestatsMatch1.5.4rc2
ORfirestatsfirestatsMatch1.5.5rc3
ORfirestatsfirestatsMatch1.5.7rc1
ORfirestatsfirestatsMatch1.5.8rc2
ORfirestatsfirestatsMatch1.5.9rc3
ORfirestatsfirestatsMatch1.5.10rc4
ORfirestatsfirestatsMatch1.5.11stable
ORfirestatsfirestatsMatch1.5.12stable
ORfirestatsfirestatsMatch1.6
ORfirestatsfirestatsMatch1.6.0
ORfirestatsfirestatsMatch1.6.0rc1
ORfirestatsfirestatsMatch1.6.0rc2
ORfirestatsfirestatsMatch1.6.0rc3
ORfirestatsfirestatsMatch1.6.0rc4
ORfirestatsfirestatsMatch1.6.0stable
ORfirestatsfirestatsMatch1.6.0-beta1
ORfirestatsfirestatsMatch1.6.0-beta2
ORfirestatsfirestatsMatch1.6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wordpress | wordpress | * | cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* |
| firestats | firestats | * | cpe:2.3:a:firestats:firestats:*:stable:*:*:*:*:*:* |
| firestats | firestats | 0.9.0-beta | cpe:2.3:a:firestats:firestats:0.9.0-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.1-beta | cpe:2.3:a:firestats:firestats:0.9.1-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.2-beta | cpe:2.3:a:firestats:firestats:0.9.2-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.3-beta | cpe:2.3:a:firestats:firestats:0.9.3-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.4-beta | cpe:2.3:a:firestats:firestats:0.9.4-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.5-beta | cpe:2.3:a:firestats:firestats:0.9.5-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.6-beta | cpe:2.3:a:firestats:firestats:0.9.6-beta:*:*:*:*:*:*:* |
| firestats | firestats | 0.9.7-beta | cpe:2.3:a:firestats:firestats:0.9.7-beta:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-2143
2009-06-22 14:00:00
openvas
openvas
FireStats 'firestats-wordpress.php' Remote File Include Vulnerability
2009-06-21 00:00:00
FireStats 'firestats-wordpress.php' Remote File Include Vulnerability
2009-06-21 00:00:00
nvd
nvd
CVE-2009-2143
2009-06-22 14:30:00
prion
prion
Remote file inclusion
2009-06-22 14:30:00
patchstack
patchstack
WordPress FireStats Plugin <= 1.6.1 - Remote File Inclusion
2009-06-22 00:00:00
nessus
nessus
FireStats < 1.6.2 Multiple Vulnerabilities
2009-07-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.007
Percentile
80.6%
Related for CVE-2009-2143