Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-4140

EPSS 91.09% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-4140

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open Flash Chart 'ofc_upload_image.php'非限制文件上传漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Piwik 0.2.35至0.4.3版本，Woopra Analytics Plugin 1.4.3.2之前版本及其他产品中使用的Open Flash Chart v2 Beta 1至v2 Lug Wyrm Charmer的ofc_upload_image.php中存在非限制文件上传漏洞。当register_globals被激活时，远程认证用户可通过上传一个可执行扩展的文件执行任意代码，该文件名具有HTTP_RAW_POST_DATA参数中的代码，并通过对tmp-upload-images/中文件的一个直
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-4140

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4140

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-12-22 · 25 CVEs total

CVE-2009-4391TYPO3 File list扩展跨站脚本攻击漏洞
CVE-2009-3702PHP-Calendar远程以及本地文件包含漏洞
CVE-2009-4401TYPO3 Parish Administration Database扩展SQL注入漏洞
CVE-2009-4400TYPO3 Administration Database扩展跨站脚本攻击漏洞
CVE-2009-4399TYPO3 Holy Spirit Religious Art Gallery扩展SQL注入漏洞
CVE-2009-4398TYPO3 Holy Spirit Religious Art Gallery扩展跨站脚本攻击漏洞
CVE-2009-4397TYPO3 Portsmouth Resources Database扩展跨站脚本攻击漏洞
CVE-2009-4396TYPO3 Portsmouth Resources Database扩展SQL注入漏洞
CVE-2009-4395TYPO3 Random Prayer 2扩展跨站脚本攻击漏洞
CVE-2009-4394TYPO3 Random Prayer 2 扩展SQL注入漏洞
CVE-2009-4393TYPO3 Document Directorys扩展SQL注入漏洞
CVE-2009-4392TYPO3 xds_staff SQL注入漏洞
CVE-2009-4379Valarsoft Webmatic多个未明跨站脚本漏洞
CVE-2009-4390TYPO3 Car扩展SQL注入漏洞
CVE-2009-4389TYPO3 Watchdog扩展件未明漏洞
CVE-2009-4388TYPO3 ListMan 扩展跨站脚本攻击漏洞
CVE-2009-4387ManageEngine Password Manager Pro 'ShowInContentAreaAction.do' 跨站脚本漏洞
CVE-2009-4386Booking Centre Booking System SQL注入漏洞
CVE-2009-4385Scriptsez.net Ez Poll Hoster 多个跨站请求伪造漏洞
CVE-2009-4384Scriptsez.net Ez Poll Hoster 多个跨站脚本漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4140

No comments yet

Leave a comment