CVE-2009-0570
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-0570
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter. NOTE: some of these details are obtained from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ninjadesigns Mailist 'send.php'本地文件包含漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mailist是一个基于PHP开发的可定制的邮件列表。 Ninja Designs Mailist 3.0版本的send.php中存在目录遍历漏洞,当register_globals被激活且magic_quotes_gpc被中止时,远程攻击者可以借助一个装载参数中的一个..，，包含和运行任意本地文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-0570
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-0570
请登录查看更多情报信息。
- Mailist 3.0 - Insecure Backup / Local File Inclusion - PHP webapps Exploitexploitx_refsource_EXPLOIT-DB
- https://nvd.nist.gov/vuln/detail/CVE-2009-0570
Same Patch Batch · n/a · 2009-02-13 · 38 CVEs total
| CVE-2009-0017 | Apple Mac OS X 堆缓冲区溢出漏洞 | |
| CVE-2008-6125 | Moodle User Edit Form 未明远程特权提升漏洞 | |
| CVE-2009-0362 | Fail2ban 'wuftpd.conf' 远程拒绝服务漏洞 | |
| CVE-2009-0569 | Becky! Internet Mail Read Receipt请求缓冲区溢出漏洞 | |
| CVE-2009-0009 | Apple Mac OS "Xpixlet" 内存破坏漏洞 | |
| CVE-2009-0011 | Apple Mac OS X 证书助手访问权限控制漏洞 | |
| CVE-2009-0012 | Apple Mac OS X CoreText 缓冲错误漏洞 | |
| CVE-2009-0013 | Apple Mac OS X 本地用户口令暴露漏洞 | |
| CVE-2009-0014 | Apple Mac OS X 文件夹管理器权限许可和访问控制漏洞 | |
| CVE-2009-0015 | Apple Mac OS X fseventsd 凭据管理漏洞 | |
| CVE-2008-6124 | Moodle HotPot Module 'report.php' SQL注入漏洞 | |
| CVE-2009-0018 | Apple Mac OS X Remote Apple Events服务器缓冲区溢出漏洞 | |
| CVE-2009-0019 | Apple Mac OS X Remote Apple Events 越界缓冲溢出漏洞 | |
| CVE-2009-0020 | Apple Mac OS X 资源管理器内存破坏漏洞 | |
| CVE-2009-0137 | Apple Mac OS X Safari 多个输入验证错误漏洞 | |
| CVE-2009-0138 | Apple Mac OS X 服务器管理器验证认证凭据漏洞 | |
| CVE-2009-0139 | Apple Mac OS X SMB文件系统 整数溢出漏洞 | |
| CVE-2009-0140 | Apple Mac OS X SMB文件 资源管理错误漏洞 | |
| CVE-2009-0141 | Apple Mac OS X Xterm 权限许可和访问控制漏洞 | |
| CVE-2009-0360 | Eyrie pam-krb5 API使用本地权限提升漏洞 |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2009-0570
No comments yet