Back to CVE Browser

CVE-2009-0441

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0220%

EPSS Percentile13.93th

PublishedFeb 10, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138.

Affected Platforms (CPE)

📦

Technote

Technote

= 7.2

References & Advisories

🔗 http://osvdb.org/51740

🔗 http://secunia.com/advisories/33732

🔗 http://www.securityfocus.com/bid/33592

🔗 https://www.exploit-db.com/exploits/7965

🔗 http://osvdb.org/51740

🔗 http://secunia.com/advisories/33732

🔗 http://www.securityfocus.com/bid/33592

🔗 https://www.exploit-db.com/exploits/7965

Related Vulnerabilities

CVE-2008-413810.0

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote atta...

CVE-2001-00755.0

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attac...

CVE-2001-00745.0

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) atta...

CVE-2009-227110.0

The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and ...