CVE-2009-4111
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-4111
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary files via a crafted $recipients parameter, and possibly other parameters, a different vulnerability than CVE-2009-4023.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PEAR Mail package "Mail/sendmail.php" 自变量注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PEAR Mail package 1.1.14版本, 1.2.0b2, 及其他可能版本中的Mail/sendmail.php中存在自变量注入漏洞。远程攻击者可以借助一个特制的$recipients参数和其它参数，读取并写入任意文件，该漏洞不同于CVE-2009-4023。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-4111
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-4111
请登录查看更多情报信息。
- https://bugs.gentoo.org/show_bug.cgi?id=294256x_refsource_MISC
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlvendor-advisoryx_refsource_SUSE
- https://nvd.nist.gov/vuln/detail/CVE-2009-4111
Same Patch Batch · n/a · 2009-11-28 · 19 CVEs total
| CVE-2009-4102 | Mozilla Firefox Sage RSS Feeds跨域脚本攻击漏洞 | |
| CVE-2009-4110 | DotNetNuke 搜索功能跨站脚本攻击漏洞 | |
| CVE-2009-4109 | DotNetNuke 安装向导跨站脚本攻击和信息泄露漏洞 | |
| CVE-2009-4108 | Dxm2008 XM Easy Personal FTP Server多个文件/文件夹上传拒绝服务漏洞 | |
| CVE-2009-4107 | Amplusnet Invisible Browsing .ibkey文件解析缓冲区溢出漏洞 | |
| CVE-2009-4106 | Ohloh Agoko CMS admintools/editpage-2.php未限制文件上传漏洞 | |
| CVE-2009-4105 | TYPSoft FTP Server APPE和DELE命令远程拒绝服务漏洞 | |
| CVE-2009-4104 | Lyften Designs LyftenBloggie组件SQL注入漏洞 | |
| CVE-2009-4103 | Robo-FTP Client Server Response Handling 未明远程缓冲区溢出漏洞 | |
| CVE-2009-4023 | PEAR Mail软件包Sendmail Mail::Send()方式参数注入漏洞 | |
| CVE-2009-4101 | Firefox infoRSS 输入验证错误漏洞 | |
| CVE-2009-4100 | Yoono扩展DOM事件处理器跨域脚本攻击漏洞 | |
| CVE-2009-4099 | G4J.Laoneo Google Calendar GCalendar组件SQL注入漏洞 | |
| CVE-2009-4098 | OpenX banner-edit.php脚本任意文件上传漏洞 | |
| CVE-2009-4097 | Serenity Audio Player MplayInputFile函数缓冲区溢出漏洞 | |
| CVE-2009-4096 | RADIO istek scripti 根目录访问控制漏洞 | |
| CVE-2009-4025 | PEAR Net_Traceroute 'Traceroute.php' 任意参数注入漏洞 | |
| CVE-2009-4024 | PEAR Net_Ping 'ping()'参数注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2009-4111
No comments yet