Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2009-2396

Published: 09/07/2009 Updated: 19/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote malicious users to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

dutchmonkey dm_album 1.9.2

dutchmonkey dm album 1.9.2

Exploits

Exploit DB: WordPress Plugin DM Albums 1.9.2 - Remote File Inclusion
############################################################################################# [+] DM Albumsâ„¢ 192 & WordPress Plug-in Remote File Include Vulnerability [+] Author : Septemb0x [+] wwwCyber-WarriorOrg - Information Technology's World [+] Greetz : BARCOD3 And All Friends [+] Dork : Yok Dork Mork :D [+] Download Script : ...

References

CWE-94http://www.securityfocus.com/bid/35521http://secunia.com/advisories/35619http://www.exploit-db.com/exploits/9043https://nvd.nist.govhttps://www.exploit-db.com/exploits/9043/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324path traversalCVE-2024-4743CVE-2024-5184TCPCVE-2024-27822code injectionCVE-2024-28995CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook