Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-3815
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2009-3815

2022-10-0316:23:57
CWE-200
[email protected]
web.nvd.nist.gov
19
cve-2009-3815
runcms
error_reporting
remote attackers
sensitive information
installation path
preg_match function

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%

JSON

RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2) uid[] parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a call to the preg_match function.

Affected configurations

NVD
Node
runcmsruncmsMatch2m1
CPENameOperatorVersion
runcms:runcmsruncmseq2m1

Related

prion 1
nvd 1
cvelist 1
prion
prion
Design/Logic Flaw
2009-10-27 16:30:00
nvd
nvd
CVE-2009-3815
2009-10-27 16:30:00
cvelist
cvelist
CVE-2009-3815
2022-10-03 16:23:57

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%

JSON
Related for CVE-2009-3815
prion1nvd1cvelist1