Lucene search
MitreCVE-2009-4220HistoryDec 07, 2009 - 5:30 p.m.
CVE-2009-4220
2009-12-0717:30:00
CWE-94
mitre
web.nvd.nist.gov
29
cve-2009-4220
pointcomma
php
remote file inclusion
vulnerability
nvd
url
pcconfig
smartypath
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.026
Percentile
90.5%
PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter.
Affected configurations
Node
raphael_mazoyerpointcommaRange≤3.8b2
ORraphael_mazoyerpointcommaMatch3.1
ORraphael_mazoyerpointcommaMatch3.1.1
ORraphael_mazoyerpointcommaMatch3.5
ORraphael_mazoyerpointcommaMatch3.5beta_2
ORraphael_mazoyerpointcommaMatch3.6
ORraphael_mazoyerpointcommaMatch3.8beta
ORraphael_mazoyerpointcommaMatch3.51
ORraphael_mazoyerpointcommaMatch3.51beta
ORraphael_mazoyerpointcommaMatch3.53beta
| Vendor | Product | Version | CPE |
|---|---|---|---|
| raphael_mazoyer | pointcomma | * | cpe:2.3:a:raphael_mazoyer:pointcomma:*:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.1 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.1:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.1.1 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.1.1:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.5 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.5:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.5 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.5:beta_2:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.6 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.6:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.8 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.8:beta:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.51 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.51:*:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.51 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.51:beta:*:*:*:*:*:* |
| raphael_mazoyer | pointcomma | 3.53 | cpe:2.3:a:raphael_mazoyer:pointcomma:3.53:beta:*:*:*:*:*:* |
Related
prion
prion
Remote file inclusion
2009-12-07 17:30:00
cvelist
cvelist
CVE-2009-4220
2009-12-07 17:00:00
exploitdb
exploitdb
pointcomma 3.8b2 - Remote File Inclusion
2009-11-24 00:00:00
nvd
nvd
CVE-2009-4220
2009-12-07 17:30:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.026
Percentile
90.5%
Related for CVE-2009-4220