CVE-2010-1351
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nodesform 1.033和1.045中存在多个PHP远程文件包含漏洞。当register_globals被启用时，远程攻击者可以通过多个脚本参数中的URL执行任意PHP代码，包括： (1) 脚本erase_user_data.php中参数_nodesforum_path_from_here_to_nodesforum_folder； (2) 脚本pre_output.php中参数_nodesforum_code_path；
Public Exploits 1
ExploitDB · 1
EDB-12047 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-1351
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _nodesforum_path_from_here_to_nodesforum_folder parameter to erase_user_data.php and the (2) _nodesforum_code_path parameter to pre_output.php. NOTE: some of these details are obtained from third party information.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Nodesform多个PHP远程文件包含漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nodesform 1.033和1.045中存在多个PHP远程文件包含漏洞。当register_globals被启用时，远程攻击者可以通过多个脚本参数中的URL执行任意PHP代码，包括： (1) 脚本erase_user_data.php中参数_nodesforum_path_from_here_to_nodesforum_folder； (2) 脚本pre_output.php中参数_nodesforum_code_path；
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-1351
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-1351
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-1351 (2)
Exploits & Public PoCs for CVE-2010-1351 (1)
Same Patch Batch · n/a · 2010-04-12 · 21 CVEs total
| CVE-2010-1149 | Freedesktop udisks 'probers/udisks-dm-export.c' 本地信息泄露漏洞 | |
| CVE-2010-1348 | IBM WebSphere Portal登录程序未明漏洞 | |
| CVE-2010-1347 | IBM Systems Director Agent 不安全文件权限管理漏洞 | |
| CVE-2010-1148 | Linux Kernel cifs_create()函数空指针引用漏洞 | |
| CVE-2010-1354 | Joomla! 'VJDEO'组件目录遍历漏洞 | |
| CVE-2010-1353 | JWowjoomla 'LoginBox Pro'组件目录遍历漏洞 | |
| CVE-2010-1352 | JOOFORGE Jutebox组件目录遍历漏洞 | |
| CVE-2010-1350 | Joomla! 'com_jp_jobs'组件'id'参数SQL注入漏洞 | |
| CVE-2010-1349 | Opera Web浏览器Content-Length堆溢出漏洞 | |
| CVE-2010-1152 | memcached 输入验证错误漏洞 | |
| CVE-2009-1564 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1146 | Linux Kernel ReiserFS文件系统实现绕过安全限制漏洞 | |
| CVE-2010-1142 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1141 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1140 | VMware USB服务 特洛伊木马权限获取漏洞 | |
| CVE-2010-1139 | VMware vmrun格式化字符串漏洞 | |
| CVE-2010-1138 | VMware 虚拟网络堆栈远程攻击敏感信息泄露漏洞 | |
| CVE-2010-0741 | Linux kernel 输入验证错误漏洞 | |
| CVE-2009-3732 | VMware Remote Console vmware-vmrc.exe 格式化字符串漏洞 | |
| CVE-2009-1565 | VMware VMnc HexTile编码视频块多个堆溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-1351
No comments yet