Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2009-1853

EPSS 0.25% · P48
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1853

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Kensei Board "index.php" SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kensei Board 2.0 BETA (又称2.0.0b)版本及其早期版本的index.php中存在多个SQL注入漏洞。远程攻击者可以借助一个showforum操作中的(1)f和(2)t参数,执行任意SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-1853

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1853

登录查看更多情报信息。

Same Patch Batch · n/a · 2009-06-01 · 20 CVEs total

CVE-2009-1847Easy PX 41 CMS "index.php" 多个目录遍历漏洞
CVE-2004-2763Sun ONE/iPlanet Web Server HTTP TRACE信息窃取漏洞
CVE-2003-1573Sun J2EE/RI Pointbase数据库远程命令执行漏洞
CVE-2003-1572Sun Java Media Framework未明远程拒绝服务攻击漏洞
CVE-2009-1854Cmsnx Million Dollar Text Links cookie权限管理和访问控制漏洞
CVE-2009-1852Graphiks MyForum Login 多个SQL注入漏洞
CVE-2009-1851Paessler phpBugTracker 'include.php' SQL注入漏洞
CVE-2009-1850Paessler phpBugTracker 'index.php' SQL注入漏洞
CVE-2009-1849PRTG Traffic Grapher Monitor_Bandwidth函数跨站脚本漏洞
CVE-2009-1848JoomlaMe AgoraGroups SQL注入漏洞
CVE-2008-6817Mole Group Lastminute Script明文信息泄露漏洞
CVE-2009-1846bjsintay sitex 多个目录遍历漏洞
CVE-2009-1845Lussumo Vanilla ajax/updatecheck.php模块跨站脚本漏洞
CVE-2009-1805VMware Workstation 驱动"Products Descheduled Time Accounting" 未明拒绝服务漏洞
CVE-2008-6819Microsoft Windows win32k.sys驱动本地权限提升漏洞
CVE-2009-1844Drupal Taxonomy Vocabulary 多个跨站脚本攻击漏洞
CVE-2009-1843Flash Quiz多个SQL注入漏洞
CVE-2009-1842PHP-Nuke 'userLog.php' SQL注入漏洞
CVE-2008-6818Mole Group Real Estate Script明文信息泄露漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2009-1853

No comments yet


Leave a comment