返回 CVE 瀏覽器

CVE-2009-0441

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0220%

EPSS Percentile13.93th

Published2009年2月10日

Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138.

Affected Platforms (CPE)

📦

Technote

Technote

= 7.2

References & Advisories

🔗 http://osvdb.org/51740

🔗 http://secunia.com/advisories/33732

🔗 http://www.securityfocus.com/bid/33592

🔗 https://www.exploit-db.com/exploits/7965

🔗 http://osvdb.org/51740

🔗 http://secunia.com/advisories/33732

🔗 http://www.securityfocus.com/bid/33592

🔗 https://www.exploit-db.com/exploits/7965

相關漏洞威脅

CVE-2008-413810.0

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote atta...

CVE-2001-00755.0

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attac...

CVE-2001-00745.0

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) atta...

CVE-2009-427310.0

stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command...

CVE-2009-0441 Detail & Impact Analysis | CVSS 6.8 (MEDIUM) | Cyber-Sec.Space | Cyber-Sec.Space