4
CVE-2009-2355
- EPSS 1.1%
- Veröffentlicht 07.07.2009 23:30:00
- Zuletzt bearbeitet 16.06.2026 23:09:16
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dan Cahill ≫ Nulllogic Groupware Version1.2.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.1% | 0.614 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55
http://www.securityfocus.com/archive/1/504737/100/0/threaded
http://www.vupen.com/english/advisories/2009/1817