CVE-2009-0672
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-0672
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the user_prefix parameter to modules.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ravenphpscripts Raven Web Services RavenNuke 'Resend_Email'模块SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RavenNuke是基于PHP和MySQL的自动新闻发布和内容管理系统。 Raven Web Services RavenNuke的Resend_Email模块存在SQL注入漏洞。远程管理员可以利用modules.php中的user_prefix参数执行任意SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-0672
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-0672
Please Login to view more intelligence information
- http://ravenphpscripts.com/postt17156.htmlx_refsource_CONFIRM
- http://www.waraxe.us/advisory-72.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2009-0672
Same Patch Batch · n/a · 2009-02-22 · 11 CVEs total
| CVE-2009-0040 | Libpng库未初始化指针数组内存破坏漏洞 | |
| CVE-2009-0440 | IBM WebSphere Partner Gateway RNIF文档绕过安全限制漏洞 | |
| CVE-2009-0673 | Ravenphpscripts Raven Web Services RavenNuke '你的账户'模块'自定义范围'参数注入漏洞 | |
| CVE-2009-0674 | Ravenphpscripts Raven Web Services RavenNuke ‘images/captcha.php’代码注入漏洞 | |
| CVE-2009-0675 | Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞 | |
| CVE-2009-0676 | Linux Kernel sock.c SO_BSDCOMPAT选项信息泄露漏洞 | |
| CVE-2009-0677 | Ravenphpscripts Raven Web Services RavenNuke'你的账户'模块任意代码执行漏洞 | |
| CVE-2009-0678 | Ravenphpscripts RavenNuke ’images/captcha.php‘ 信息泄露漏洞 | |
| CVE-2009-0679 | Ravenphpscripts RavenNuke '你的账户'模块跨站脚本漏洞 | |
| CVE-2009-0680 | NetGear SSL312 目录遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo - CVE-2026-8252
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer - CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo
V. Comments for CVE-2009-0672
No comments yet