CVE-2009-4113

Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with…

published November 30, 2009

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category Access field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.4th percentile
Published
2009-11-30T21:00Z
EPSS history
Timeline
  • 30 NOV 21:00Z
    Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with…
    cvelistv5