CVE-2009-0336
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-0336
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Katy Whitton BlogIt!根目录权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Katy Whitton BlogIt!在web根下储存敏感信息而未赋予足够的访问控制，这使得远程攻击者可以借助一个对database/Blog.mdb的直接请求，下载包含用户信任证书的数据库文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-0336
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-0336
Please Login to view more intelligence information
Same Patch Batch · n/a · 2009-01-29 · 28 CVEs total
| CVE-2009-0326 | Dark Age CMS 'login.php' SQL注入漏洞 | |
| CVE-2009-0340 | Quirm Simple PHP Newsletter多个目录遍历漏洞 | |
| CVE-2009-0339 | DMXReady Blog Manager 'inc_weblogmanager.asp' SQL注入漏洞 | |
| CVE-2009-0338 | DMXReady Blog Manager 'inc_webblogmanager.asp' 跨站脚本攻击漏洞 | |
| CVE-2009-0337 | Katy Whitton BlogIt!脚本index.asp SQL注入漏洞 | |
| CVE-2009-0335 | Katy Whitton BlogIt! 'index.asp'跨站脚本攻击漏洞 | |
| CVE-2009-0334 | Katy Whitton BlogIt! 'index.asp' SQL注入漏洞 | |
| CVE-2009-0333 | Joomla! 组件WebAmoeba (WA) Ticket System SQL注入漏洞 | |
| CVE-2009-0332 | AV Book Library多个SQL注入漏洞 | |
| CVE-2009-0331 | Quirm Enhanced Simple PHP Gallery comment.php目录遍历漏洞 | |
| CVE-2009-0330 | Wss-Pro Simple Content Management System index.php目录遍历漏洞 | |
| CVE-2009-0329 | Joomla! 组件PcCookBook SQL注入漏洞 | |
| CVE-2009-0328 | ROBS-PROJECTS Digital Sales IPN_ 根目录权限许可和访问控制漏洞 | |
| CVE-2009-0327 | Seraphimtech Free Bible Search 'readbible.php' SQL注入漏洞 | |
| CVE-2009-0341 | Microsoft Internet Explorer缓冲区溢出漏洞 | |
| CVE-2009-0325 | Ninja Blog index.php目录遍历漏洞 | |
| CVE-2009-0324 | BibCiter 多个SQL注入漏洞 | |
| CVE-2009-0351 | Wftpserver WinFTP 'WFTPSRV.exe'缓冲区溢出漏洞 | |
| CVE-2009-0350 | Merak Media Player .m3u文件处理栈溢出漏洞 | |
| CVE-2009-0349 | FTPShell Server证书密钥文件处理栈溢出漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_
V. Comments for CVE-2009-0336
No comments yet