What is CVE-2009-0610?

CVE-2009-0610 is a vulnerability in Dminnich Simple Php News, classified under Code Injection. Published 2009-02-17.

Is CVE-2009-0610 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Dminnich Simple Php News

CVE-2009-0610

Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the (1) title or (2) date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.048 (91.1th percentile) — read the EPSS interpretation.

Affected products

Dminnich Simple_php_news — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

gosirys/Exploits

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2009-0610?: CVE-2009-0610 is a vulnerability in Dminnich Simple Php News, classified under Code Injection. Published 2009-02-17.
Is CVE-2009-0610 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.