Lucene search
HistoryJul 05, 2009 - 4:30 p.m.
CVE-2009-2331
code injection
security
cms
cve-2009-2331
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary PHP code (1) into settings.php via the menu parameter to admin_settings.php or (2) into a content/=NUMBER.php file via the title parameter to admin_new.php.
Affected configurations
Node
cms.tut.sucms_chainukRange≤1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| cms.tut.su:cms_chainuk | cms.tut.su cms chainuk | le | 1.2 |
Related
nvd
nvd
CVE-2009-2331
2009-07-05 16:30:00
prion
prion
Code injection
2009-07-05 16:30:00
cvelist
cvelist
CVE-2009-2331
2009-07-05 16:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.2%
Related for CVE-2009-2331