CVE-2009-2736

CVE-2009-2736 concerns sun-jester OpenNews 1.0. The vulnerability is a static code injection in admin.php that allows remote authenticated administrators to inject arbitrary PHP code into config.php via the “Overall Width” field in a setconfig action. The issue originates from the admin.php compo...

CVE-2009-2736

creationtimestamp| type| source ---|---|--- 2009-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9371...