PT-2009-5037 · Unknown · School Data Navigator

Br0Ly · Publicado 2009-07-28 · Atualizado 2017-09-19 · CVE-2009-2641

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions School Data Navigator (affected versions not specified)

Description A remote file inclusion issue in the School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. This can also be used to include and execute arbitrary local files using .. (dot dot) sequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-2641

Produtos afetados

School Data Navigator

Referências · 3

• 🔥 https://exploit-db.com/exploits/8924 · Exploit
• 🔥 http://exploit-db.com/exploits/8924 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2641 · Nota de Segurança