CVE-2009-0964 - Vulnerability Details - OpenCVE

Description

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.

Published: 2009-03-19

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00965.

Key SSVC decision points have not yet been added.

References

Link	Providers
http://osvdb.org/52804
http://www.bugreport.ir/index_63.htm
http://www.securityfocus.com/archive/1/501894/100/0/threaded
http://www.vupen.com/english/advisories/2009/0750
https://exchange.xforce.ibmcloud.com/vulnerabilities/49279
https://www.exploit-db.com/exploits/8226

History

No history.

Subscriptions

Xlinesoft Phprunner

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-19T10:00:00.000Z

Updated: 2024-08-07T04:57:17.191Z

Reserved: 2009-03-18T00:00:00.000Z

Link: CVE-2009-0964

Vulnrichment

No data.

NVD

Status : Modified

Published: 2009-03-19T10:30:00.467

Modified: 2026-04-23T00:35:47.467

Link: CVE-2009-0964

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-312

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-17T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20090317 PHPRunner SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/52804"}, {"tags": ["x_refsource_MISC"], "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0750"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-0964", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20090317 PHPRunner SQL Injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "refsource": "OSVDB", "url": "http://osvdb.org/52804"}, {"name": "http://www.bugreport.ir/index_63.htm", "refsource": "MISC", "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0750"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:57:17.191Z"}, "title": "CVE Program Container", "references": [{"name": "20090317 PHPRunner SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"name": "8226", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/8226"}, {"name": "52804", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/52804"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.bugreport.ir/index_63.htm"}, {"name": "phprunner-userview-information-disclosure(49279)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"name": "ADV-2009-0750", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0750"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0964", "datePublished": "2009-03-19T10:00:00.000Z", "dateReserved": "2009-03-18T00:00:00.000Z", "dateUpdated": "2024-08-07T04:57:17.191Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03", "versionEndIncluding": "4.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."}, {"lang": "es", "value": "UserView_list.php en PHPRunner v4.2, y posiblemente versiones anteriores, guarda las contrase\u00f1as en la base de datos en texto plano, lo que permite a atacantes obtener privilegios. NOTA: esto puede ser aprovechado mediante una vulnerabilidad de inyecci\u00f3n SQL para obtener contrase\u00f1as de forma remota sin autenticaci\u00f3n."}], "id": "CVE-2009-0964", "lastModified": "2026-04-23T00:35:47.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2009-03-19T10:30:00.467", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/52804"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Exploit"], "url": "http://www.bugreport.ir/index_63.htm"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2009/0750"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/8226"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/52804"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Exploit"], "url": "http://www.bugreport.ir/index_63.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/501894/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2009/0750"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49279"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/8226"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-312"}], "source": "nvd@nist.gov", "type": "Primary"}]}