cbcvebase.
CVE-2009-4113
published 2009-11-30

CVE-2009-4113: Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with…

PriorityP432medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
1.26%
65.9th percentile
Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category Access field.

Affected

2 ranges
VendorProductVersion rangeFixed in
cutephpcutenews——
korn19utf-8_cutenews——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.