CVE-2009-2960
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-2960
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CuteFlow pages/edituser.php脚本绕过安全限制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CuteFlow是一个基于Web的文档流通和工作流工具。 CuteFlow没有正确地限制对pages/edituser.php脚本的访问，远程用户可以通过直接访问这个脚本绕过认证修改用户的设置，如更改管理员口令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-2960
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-2960
请登录查看更多情报信息。
Same Patch Batch · n/a · 2009-08-25 · 29 CVEs total
| CVE-2008-7070 | KVIrc URI Handler 远程代码执行漏洞 | |
| CVE-2008-7083 | ReVou Login SQL注入漏洞 | |
| CVE-2008-7082 | Mybboard MyBB Referer头my_post_key令牌信息泄露漏洞 | |
| CVE-2008-7081 | RaidSonic ICY BOX NAS 'userHandler.cgi' 身份认证绕过漏洞 | |
| CVE-2008-7080 | Php_classifieds_script 权限许可和访问控制漏洞 | |
| CVE-2008-7079 | Nero ShowTime .m3u文件处理缓冲区溢出漏洞 | |
| CVE-2008-7078 | Maxum Rumpus FTP Server HTTP命令远程拒绝服务漏洞 | |
| CVE-2008-7077 | Relative SailPlanner Login SQL注入漏洞 | |
| CVE-2008-7076 | Kalptaru_Infotech Star Articles 'user.modify.profile.php' 任意文件上传漏洞 | |
| CVE-2008-7075 | Kalptaru_Infotech Star Articles多个SQL注入漏洞 | |
| CVE-2008-7074 | MemeCode Software i.Scribe 远程格式化字符串漏洞 | |
| CVE-2008-7073 | Ekkaia Pie RSS Module 'lib' Parameter 远程文件包含漏洞 | |
| CVE-2008-7072 | Chipmunk Topsites 'start' Parameter跨站脚本攻击漏洞 | |
| CVE-2008-7071 | Chipmunk Topsites 'authenticate.php' SQL注入漏洞 | |
| CVE-2009-2959 | Buildbot 多个未明跨站脚本攻击漏洞 | |
| CVE-2008-7069 | paul_arbogast accms 信息泄露漏洞 | |
| CVE-2008-7068 | PHP dba_replace函数 输入验证漏洞 | |
| CVE-2008-7067 | PageTree CMS 'main.php'远程文件包含漏洞 | |
| CVE-2008-7066 | 2Enetworx OpenForum 'profile.php'身份认证绕过漏洞 | |
| CVE-2008-7065 | Siemens C450IP/C475IP电话远程拒绝服务漏洞 |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2009-2960
No comments yet