Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2007

EPSS 0.36% · P58
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2007

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Dokeos 多个目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dokeos 1.8.5版本及其早期版本中存在多个目录遍历漏洞。远程攻击者(1)可以借助对main/exercice/hotspot_lang_conversion.php参数的lang参数中的一个..和一个..\来读取任意文件的部分内容(2)对main/exercice/Hpdownload.php的doc_url参数中的一个..，读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2007

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2007

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-06-08 · 15 CVEs total

CVE-2008-6826MHF Media Pro 'dhtml.pl'远程指令执行漏洞
CVE-2008-6827Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞
CVE-2008-6828Symantec Altiris Deployment Solution "cleartext" 加密问题漏洞
CVE-2008-6829VicFTPS 命令'LIST'　远程拒绝服务漏洞
CVE-2008-6830Citrix Web Interface 断开功能权限管理和访问控制漏洞
CVE-2008-6831Atlassian JIRA 多个跨站脚本攻击漏洞
CVE-2008-6832Atlassian JIRA 跨站脚本攻击漏洞
CVE-2009-2003Ascad Networks Cookie权限绕过漏洞
CVE-2009-2004Dokeos 多个远程输入验证漏洞
CVE-2009-2005Dokeos 多个远程输入验证漏洞
CVE-2009-2006Dokeos 多个远程输入验证和跨站脚本攻击漏洞
CVE-2009-2008Dokeos 多个SQL注入漏洞
CVE-2009-2009Dokeos 多个远程输入验证和跨站脚本攻击漏洞
CVE-2009-2010Haudenschilt Family Connections CMS 多个SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2007

No comments yet

Leave a comment