Lucene search
HistoryMay 04, 2010 - 4:00 p.m.
CVE-2009-4834
zeroboard
remote code execution
cve-2009-4834
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php.
Affected configurations
Node
xpressenginezeroboardMatch4.1pl7
| CPE | Name | Operator | Version |
|---|---|---|---|
| xpressengine:zeroboard | xpressengine zeroboard | eq | 4.1 |
Related
cvelist
cvelist
CVE-2009-4834
2010-05-04 15:00:00
prion
prion
Code injection
2010-05-04 16:00:00
nvd
nvd
CVE-2009-4834
2010-05-04 16:00:35
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.0%
Related for CVE-2009-4834