CVE-2009-4592
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-4592
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Secureideas Basic Analysis and Security Engine 'base_local_rules.php'未明漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Basic Analysis and Security Engine (BASE) 1.4.4之前版本的base_local_rules.php文件中存在未明漏洞。远程攻击者可以借助未知向量，包含任意的本地文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-4592
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-4592
Please Login to view more intelligence information
- http://base.secureideas.net/news.phpx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2009-4592
Same Patch Batch · n/a · 2010-01-07 · 20 CVEs total
| CVE-2010-0227 | Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动密码验证漏洞 | |
| CVE-2009-4593 | Bftpd 'bftpdutmp.c ' 未明远程拒绝服务漏洞 | |
| CVE-2009-4591 | Secureideas Basic Analysis and Security Engine SQL注入漏洞 | |
| CVE-2009-4590 | Secureideas Basic Analysis and Security Engine 'base_local_rules.php'跨站脚本攻击漏洞 | |
| CVE-2009-4589 | MediaWiki 'SpecialBlockip.php' 跨站脚本攻击漏洞 | |
| CVE-2009-4588 | AwingSoft Awakening Web3D Player和Winds3D Viewer ActiveX 控件缓冲区溢出漏洞 | |
| CVE-2009-4587 | Cherokee Web Server GET request拒绝服务漏洞 | |
| CVE-2009-4586 | Wowd client 'index.html'多个跨站脚本攻击漏洞 | |
| CVE-2010-0229 | Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动 | |
| CVE-2010-0228 | Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash驱动256比特的密匙访问权限漏洞 | |
| CVE-2009-3742 | Liferay Portal Plugins Configuration p_p_id参数跨站脚本漏洞 | |
| CVE-2010-0226 | SanDisk Cruzer Enterprise USB flash驱动密匙明文驱动漏洞 | |
| CVE-2010-0225 | SanDisk Cruzer Enterprise 加密问题漏洞 | |
| CVE-2010-0224 | SanDisk Cruzer Enterprise USB flash验证密码驱动漏洞 | |
| CVE-2010-0223 | Kingston DataTraveler USB flash驱动密匙访问驱动漏洞 | |
| CVE-2010-0222 | Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP)和DataTrav | |
| CVE-2010-0221 | Kingston DataTraveler BlackBox、DataTraveler Secure Privacy Edition、DataTraveler Elite Priv | |
| CVE-2010-0220 | Mozilla Firefox 'nsObserverList.cpp'拒绝服务攻击漏洞 | |
| CVE-2009-4497 | LXR Cross Referencer 多个跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send
V. Comments for CVE-2009-4592
No comments yet