CVE-2009-1912
Published Jun 4, 2009
Last updated 7 years ago
Overview
- Description
- Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-22
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA50D95F-FD41-4CB8-B57B-C2B22679CA44",
"versionEndIncluding": "4.2.0e"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8511CDAC-8292-4696-A0BE-7DC321CF6500"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.0.2c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE172AFC-0C9B-4128-862C-7F46026E5BAB"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37CE7D68-2638-4ED7-AFA5-8B9FC398B5CE"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.01.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E9ED52-3AF4-4215-A828-B8D4EE9A597A"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F5B8975-C514-457E-95FE-84FF3C44275F"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.01.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D16B895D-B1C0-4727-A06C-518F7E22421C"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.01.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EF027B3-CC1B-48C1-9EED-E5A3A2CD585A"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B5F7643-A1B4-4195-A59B-33F3F9D31C72"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.2.0c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45223AEF-D151-4C08-993F-1537BC02DA40"
},
{
"criteria": "cpe:2.3:a:webspell:webspell:4.2.0d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63DDF25B-8DEE-4406-800F-FF05C64BD9F3"
}
],
"operator": "OR"
}
]
}
]