PT-2009-4563 · Unknown · Db Top Sites

Sirgod · Published 2009-06-18 · Updated 2017-09-29 · CVE-2009-2111

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DB Top Sites version 1.0

Description A static code injection issue exists, allowing remote attackers to inject arbitrary PHP code. This can be achieved by crafting specific parameters, including the url and location parameters.

Recommendations For DB Top Sites version 1.0, consider restricting access to the add reg.php file until a patch is available. As a temporary workaround, avoid using the url and location parameters in the affected API endpoint.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-2111

Affected Products

Db Top Sites

References · 5

• 🔥 https://exploit-db.com/exploits/8951 · Exploit
• http://secunia.com/advisories/35419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2111 · Security Note
• http://osvdb.org/55119 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51121 · Note