Security Advisory

CVE-2009-4115

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-11-30 21:00:00

Last updated 2024-08-07 06:54:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the (1) category and (2) Icon URL fields; or (3) inject arbitrary PHP code into data/ipban.php via the add_ip parameter.

← Browse all CVEs View on cve.org ↗