Lucene search

K
nvd[email protected]NVD:CVE-2009-1463
HistoryApr 28, 2009 - 4:30 p.m.

CVE-2009-1463

2009-04-2816:30:03
CWE-94
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.

Affected configurations

NVD
Node
razorcmsrazorcmsRange0.3
OR
razorcmsrazorcmsMatch0.2
OR
razorcmsrazorcmsMatch0.3rc2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

Related for NVD:CVE-2009-1463