Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2009-4466

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

DeluxeBB允许远程攻击者借助对misc.php的一个特制页参数获得敏感信息，这会使安装路径信息在一个错误信息中丢失。注意: 该漏洞可能与 tools.php中的错误运算相关，该错误运算还会引起拒绝服务(CPU或内存破坏)。

AI Predicted 5.3 Difficulty: Trivial EPSS 2.43% · P83

Public Exploits 1

ExploitDB · 1 EDB-10598#CVE-2009-4466 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-4466

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in an error message. NOTE: this issue might be resultant from improperly controlled computation in tools.php that leads to a denial of service (CPU or memory consumption).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
DeluxeBB 'misc.php' 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DeluxeBB允许远程攻击者借助对misc.php的一个特制页参数获得敏感信息，这会使安装路径信息在一个错误信息中丢失。注意: 该漏洞可能与 tools.php中的错误运算相关，该错误运算还会引起拒绝服务(CPU或内存破坏)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2009-4466

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4466

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-4466 (2)

Exploits & Public PoCs for CVE-2009-4466 (1)

Same Patch Batch · n/a · 2009-12-30 · 30 CVEs total

CVE-2009-4471 freeschool多个PHP远程文件包含漏洞
CVE-2008-7250 Pedro_Lineu_Orso Squid Analysis Report Generator JavaScript加载事件跨站脚本攻击漏洞
CVE-2008-7249 Pedro_Lineu_Orso Squid Analysis Report Generator缓冲区溢出漏洞
CVE-2009-4484 MySQL yaSSL TaoCrypt的src/asn.cpp CertDecoder::GetName函数多个栈缓冲区错误漏洞
CVE-2009-4483 MailSite 'LDAP3A.exe' 未明远程拒绝服务漏洞
CVE-2009-4482 tversity 'MediaServer.exe' 未明缓冲区溢出漏洞
CVE-2009-4480 AzeoTech DAQFactory web服务缓冲区溢出漏洞
CVE-2009-4479 MailSite 'LDAP3A.exe' 多个远程拒绝服务漏洞
CVE-2009-4478 Xstate Real Estate 多个跨站脚本攻击漏洞
CVE-2009-4477 Xstate Real Estate 'page.html' SQL注入漏洞
CVE-2009-4476 HAURI ViRobot Desktop缓冲区溢出漏洞
CVE-2009-4475 Joomlub 'index.php' aid参数SQL注入漏洞
CVE-2009-4474 Mambo com_zoom组件'index.php' catid参数SQL注入漏洞
CVE-2009-4473 Ektron CMS400.NET 'ekformsiframe.aspx' 多个跨站脚本攻击漏洞
CVE-2009-4472 PHPope 多个PHP远程文件包含漏洞
CVE-2009-4456 Green Desktiny 'news_detail.php' SQL注入漏洞
CVE-2009-4470 DvBBS动网论坛'boardrule.php'模块SQL注入漏洞
CVE-2009-4469 giombetti phppowercards 'pagenumber.inc.php'多个跨站脚本攻击漏洞
CVE-2009-4468 DeluxeBB 'misc.php' 跨站脚本攻击漏洞
CVE-2009-4467 DeluxeBB 'misc.php' valemail设置操作漏洞

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4466

No comments yet

Leave a comment