 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2009-0422 |
| Description: | Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.63359 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2009-0422 Bugtraq: 20090114 phpList <= 2.10.8 Local File inclusion (Google Search) http://www.securityfocus.com/archive/1/500057/100/0/threaded https://www.exploit-db.com/exploits/7778 http://www.bugreport.ir/index_60.htm http://secunia.com/advisories/33533 XForce ISS Database: phplist-indexphp-file-include(47945) https://exchange.xforce.ibmcloud.com/vulnerabilities/47945 |