CVE-2009-1677

{"id": "CVE-2009-1677", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2009-05-18T18:30:01.157", "references": [{"url": "http://secunia.com/advisories/35057", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/503435", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/34910", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/8659", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35057", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/503435", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/34910", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/8659", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's \"display name\" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php."}, {"lang": "es", "value": "Multiples vulnerabilidades de inyecci\u00f3n de c\u00f3digo est\u00e1tico en la funci\u00f3n savefeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores permite (1) a usuarios remotos autenticados, inyectar c\u00f3digo PHP de su elecci\u00f3n en ficheros, introduciendo secuencias PHP en la configuraci\u00f3n \"display name\" de las cuentas, y ejecutando boards/boards_rss.php, y podr\u00eda permitir (2) a atacantes remotos inyectar c\u00f3digo php de su elecci\u00f3n en ficheros a trav\u00e9s de la cabecera HTTP Host en una respuesta a boards/boards_rss.php"}], "lastModified": "2024-11-21T01:03:03.570", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2241EB6-A886-4C04-8632-997D6CA4F228", "versionEndIncluding": "2.6"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "431C0A41-841E-48B2-88D3-B94A43F56D51"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA6E9A08-F938-4E3F-BA68-E307E839335B"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5657A816-9C53-4D97-90C4-357FCCA7057D"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E3F9B77-302B-4EB0-B103-594CB366F880"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAA2896F-D3E4-489D-A08F-7B2E926182C0"}, {"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA9025B9-B31C-4D82-9FA0-864C3F19C7A1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}