Lucene search
HistorySep 23, 2009 - 12:08 p.m.
CVE-2009-3306
php
remote file inclusion
cve-2009-3306
clearsite 4.50
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.3%
PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter.
Affected configurations
Node
richrumbleclearsiteMatch4.50
| CPE | Name | Operator | Version |
|---|---|---|---|
| richrumble:clearsite | richrumble clearsite | eq | 4.50 |
Related
prion
prion
Remote file inclusion
2009-09-23 12:08:00
Remote file inclusion
2010-06-03 14:30:00
nvd
nvd
CVE-2009-3306
2009-09-23 12:08:34
CVE-2010-2145
2010-06-03 14:30:01
openvas
openvas
ClearSite RFI Vulnerability (Aug 2010) - Active Check
2010-08-11 00:00:00
Clearsite 'header.php' Remote File Include Vulnerability
2010-08-11 00:00:00
cvelist
cvelist
CVE-2009-3306
2009-09-23 10:00:00
CVE-2010-2145
2010-06-03 14:00:00
cve
cve
CVE-2010-2145
2010-06-03 14:30:01
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.043 Low
EPSS
Percentile
92.3%
Related for CVE-2009-3306