Lucene search
HistoryJun 11, 2010 - 2:30 p.m.
CVE-2009-4887
cve-2009-4887
remote code execution
php
security vulnerability
cms s.builder
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%
PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binn_include_path cookie. NOTE: this can also be leveraged to include and execute arbitrary local files.
Affected configurations
Node
sbuildercms_s.builderRange≤3.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| sbuilder:cms_s.builder | sbuilder cms s.builder | le | 3.7 |
Related
cvelist
cvelist
CVE-2009-4887
2010-06-11 14:00:00
nvd
nvd
CVE-2009-4887
2010-06-11 14:30:16
prion
prion
Remote file inclusion
2010-06-11 14:30:00
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%
Related for CVE-2009-4887