FKIE_CVE-2009-1677
Vulnerability from fkie_nvd - Published: 2009-05-18 18:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B2241EB6-A886-4C04-8632-997D6CA4F228",
"versionEndIncluding": "2.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
"matchCriteriaId": "431C0A41-841E-48B2-88D3-B94A43F56D51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6E9A08-F938-4E3F-BA68-E307E839335B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5657A816-9C53-4D97-90C4-357FCCA7057D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8E3F9B77-302B-4EB0-B103-594CB366F880",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BAA2896F-D3E4-489D-A08F-7B2E926182C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FA9025B9-B31C-4D82-9FA0-864C3F19C7A1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account\u0027s \"display name\" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php."
},
{
"lang": "es",
"value": "Multiples vulnerabilidades de inyecci\u00f3n de c\u00f3digo est\u00e1tico en la funci\u00f3n savefeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores permite (1) a usuarios remotos autenticados, inyectar c\u00f3digo PHP de su elecci\u00f3n en ficheros, introduciendo secuencias PHP en la configuraci\u00f3n \"display name\" de las cuentas, y ejecutando boards/boards_rss.php, y podr\u00eda permitir (2) a atacantes remotos inyectar c\u00f3digo php de su elecci\u00f3n en ficheros a trav\u00e9s de la cabecera HTTP Host en una respuesta a boards/boards_rss.php"
}
],
"id": "CVE-2009-1677",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-05-18T18:30:01.157",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35057"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/503435"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/34910"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631"
},
{
"source": "cve@mitre.org",
"url": "https://www.exploit-db.com/exploits/8659"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35057"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/503435"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/34910"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.exploit-db.com/exploits/8659"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…