CVE-2009-0964 - Vulnerability Details - OpenCVE

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Xlinesoft	Phprunner

Configuration 1 [-]

cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/52804
http://www.bugreport.ir/index_63.htm
http://www.securityfocus.com/archive/1/501894/100/0/threaded
http://www.vupen.com/english/advisories/2009/0750
https://exchange.xforce.ibmcloud.com/vulnerabilities/49279
https://www.exploit-db.com/exploits/8226

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-19T10:00:00

Updated: 2024-08-07T04:57:17.191Z

Reserved: 2009-03-18T00:00:00

Link: CVE-2009-0964

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-03-19T10:30:00.467

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-0964

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-17T00:00:00", "descriptions": [{"lang": "en", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20090317 PHPRunner SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/52804"}, {"tags": ["x_refsource_MISC"], "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0750"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-0964", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20090317 PHPRunner SQL Injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "refsource": "OSVDB", "url": "http://osvdb.org/52804"}, {"name": "http://www.bugreport.ir/index_63.htm", "refsource": "MISC", "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0750"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:57:17.191Z"}, "title": "CVE Program Container", "references": [{"name": "20090317 PHPRunner SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/52804"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0750"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0964", "datePublished": "2009-03-19T10:00:00", "dateReserved": "2009-03-18T00:00:00", "dateUpdated": "2024-08-07T04:57:17.191Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03", "versionEndIncluding": "4.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}, {"lang": "es", "value": "UserView_list.php en PHPRunner v4.2, y posiblemente versiones anteriores, guarda las contrase\u00f1as en la base de datos en texto plano, lo que permite a atacantes obtener privilegios. NOTA: esto puede ser aprovechado mediante una vulnerabilidad de inyecci\u00f3n SQL para obtener contrase\u00f1as de forma remota sin autenticaci\u00f3n."}], "id": "CVE-2009-0964", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2009-03-19T10:30:00.467", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/52804"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Exploit"], "url": "http://www.bugreport.ir/index_63.htm"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2009/0750"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/8226"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/52804"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Exploit"], "url": "http://www.bugreport.ir/index_63.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2009/0750"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/8226"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-312"}], "source": "nvd@nist.gov", "type": "Primary"}]}