CVE-2009-4137

🗓️ 24 Dec 2009 16:00:00Reported by redhatType

The loadContentFromCookie function in Piwik before 0.5 allows remote attackers to execute arbitrary code via vectors related to cookie strings

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2009-4137	24 Dec 200916:00	–	cve
Debian CVE	CVE-2009-4137	24 Dec 200916:00	–	debiancve
EUVD	EUVD-2009-4107	7 Oct 202500:30	–	euvd
FreeBSD	piwik -- php code execution	10 Dec 200900:00	–	freebsd
Tenable Nessus	FreeBSD : piwik -- php code execution (fcbf56dd-e667-11de-920a-00248c9b4be7)	14 Dec 200900:00	–	nessus
NVD	CVE-2009-4137	24 Dec 200916:30	–	nvd
OpenVAS	FreeBSD Ports: piwik	14 Dec 200900:00	–	openvas
OpenVAS	FreeBSD Ports: piwik	14 Dec 200900:00	–	openvas
canvas	Immunity Canvas: PIWIK	24 Dec 200916:30	–	canvas
Prion	Code injection	24 Dec 200916:30	–	prion

Source	Link
suspekt	www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/
openwall	www.openwall.com/lists/oss-security/2009/12/10/1
openwall	www.openwall.com/lists/oss-security/2009/12/09/2
suspekt	www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf
openwall	www.openwall.com/lists/oss-security/2009/12/14/2
piwik	www.piwik.org/blog/2009/12/piwik-response-to-shocking-news-in-php-exploitation/
sektioneins	www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/
dev	www.dev.piwik.org/trac/changeset/1637

24 Dec 2009 16:00Current

7.5High risk

Vulners AI Score7.5

EPSS0.04884