CVE-2009-4106

Published: Nov 29, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attackers to inject and execute arbitrary PHP code via the filename and text parameters.

Affected (1)

Products: Ohloh: Agoko Cms

Ohloh

1 product

Agoko Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ohloh Agoko Cms	Up to 0.4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.exploit-db.com/exploits/9605

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/2613

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/53113

Source: cve@mitre.org

http://www.exploit-db.com/exploits/9605

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/2613

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/53113

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.