CVE-2009-1604

Опубликовано: 11 мая 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/.

Ссылки

http://secunia.com/advisories/34946
Vendor Advisory
http://www.limesurvey.org/content/view/169/1/lang%2Cen/
http://www.securityfocus.com/bid/34785
http://www.vupen.com/english/advisories/2009/1219
Patch
Vendor Advisory
http://secunia.com/advisories/34946
Vendor Advisory
http://www.limesurvey.org/content/view/169/1/lang%2Cen/
http://www.securityfocus.com/bid/34785
http://www.vupen.com/english/advisories/2009/1219
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:limesurvey:limesurvey:1.80:*:*:*:*:*:*:*

cpe:2.3:a:limesurvey:limesurvey:1.80:rc4:*:*:*:*:*:*

cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:*

cpe:2.3:a:limesurvey:limesurvey:1.81:*:*:*:*:*:*:*

cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00802

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2009-1604

debian

больше 16 лет назад

Unspecified vulnerability in LimeSurvey before 1.82 allows remote atta ...

GHSA-3497-8jvc-w33p

github

почти 4 года назад