fkie_cve-2009-1677
Vulnerability from fkie_nvd
Published
2009-05-18 18:30
Modified
2025-04-09 00:30
Severity ?
Summary
Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B2241EB6-A886-4C04-8632-997D6CA4F228",
"versionEndIncluding": "2.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A31BF87D-6D73-442A-9C6C-7926A2A3E8BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*",
"matchCriteriaId": "431C0A41-841E-48B2-88D3-B94A43F56D51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6E9A08-F938-4E3F-BA68-E307E839335B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5657A816-9C53-4D97-90C4-357FCCA7057D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8E3F9B77-302B-4EB0-B103-594CB366F880",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BAA2896F-D3E4-489D-A08F-7B2E926182C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FA9025B9-B31C-4D82-9FA0-864C3F19C7A1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account\u0027s \"display name\" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php."
},
{
"lang": "es",
"value": "Multiples vulnerabilidades de inyecci\u00f3n de c\u00f3digo est\u00e1tico en la funci\u00f3n savefeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores permite (1) a usuarios remotos autenticados, inyectar c\u00f3digo PHP de su elecci\u00f3n en ficheros, introduciendo secuencias PHP en la configuraci\u00f3n \"display name\" de las cuentas, y ejecutando boards/boards_rss.php, y podr\u00eda permitir (2) a atacantes remotos inyectar c\u00f3digo php de su elecci\u00f3n en ficheros a trav\u00e9s de la cabecera HTTP Host en una respuesta a boards/boards_rss.php"
}
],
"id": "CVE-2009-1677",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-05-18T18:30:01.157",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35057"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/503435"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/34910"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631"
},
{
"source": "cve@mitre.org",
"url": "https://www.exploit-db.com/exploits/8659"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35057"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/503435"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/34910"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.exploit-db.com/exploits/8659"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…