CVE-2009-2143: Code Injection
Published Jun 22, 2009
·Updated
PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fsjavascript parameter.
Affected Software
67 affected components
WordPress WordPress
firestats FireStats<=1.6.1
firestats FireStats=0.9.0-beta
firestats FireStats=0.9.1-beta
firestats FireStats=0.9.2-beta
firestats FireStats=0.9.3-beta
firestats FireStats=0.9.4-beta
firestats FireStats=0.9.5-beta
firestats FireStats=0.9.6-beta
firestats FireStats=0.9.7-beta
firestats FireStats=0.9.8-beta
firestats FireStats=0.9.9
firestats FireStats=1.0
firestats FireStats=1.0.0-rc1
firestats FireStats=1.0.1-rc2
firestats FireStats=1.0.2-rc3
firestats FireStats=1.0.2-stable
firestats FireStats=1.1.1-rc1
firestats FireStats=1.1.2-rc2
firestats FireStats=1.1.3-rc3
firestats FireStats=1.1.3-rc4
firestats FireStats=1.1.4-rc5
firestats FireStats=1.1.5-stable
firestats FireStats=1.1.6-stable
firestats FireStats=1.1.7-stable
firestats FireStats=1.1.8-stable
firestats FireStats=1.2.0-beta
firestats FireStats=1.2.1-rc1
firestats FireStats=1.2.2-rc2
firestats FireStats=1.2.3-rc3
firestats FireStats=1.2.4-stable
firestats FireStats=1.3.0-beta
firestats FireStats=1.3.1-beta
firestats FireStats=1.3.2-beta
firestats FireStats=1.3.3-beta
firestats FireStats=1.3.4-rc1
firestats FireStats=1.3.5-rc2
firestats FireStats=1.3.6-stabe
firestats FireStats=1.4
firestats FireStats=1.4.0-beta
firestats FireStats=1.4.1-beta
firestats FireStats=1.4.2-beta
firestats FireStats=1.4.3-rc1
firestats FireStats=1.4.4-stable
firestats FireStats=1.5
firestats FireStats=1.5.0-beta
firestats FireStats=1.5.1-beta
firestats FireStats=1.5.2-beta
firestats FireStats=1.5.3-rc1
firestats FireStats=1.5.4-rc2
firestats FireStats=1.5.5-rc3
firestats FireStats=1.5.7-rc1
firestats FireStats=1.5.8-rc2
firestats FireStats=1.5.9-rc3
firestats FireStats=1.5.10-rc4
firestats FireStats=1.5.11-stable
firestats FireStats=1.5.12-stable
firestats FireStats=1.6
firestats FireStats=1.6.0
firestats FireStats=1.6.0-rc1
firestats FireStats=1.6.0-rc2
firestats FireStats=1.6.0-rc3
firestats FireStats=1.6.0-rc4
firestats FireStats=1.6.0-stable
firestats FireStats=1.6.0-beta1
firestats FireStats=1.6.0-beta2
firestats FireStats=1.6.1
Remediation
Patch Available
Event History
Jun 22, 2009
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
02:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2143?
CVE-2009-2143 is classified as a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2009-2143?
To fix CVE-2009-2143, update the FireStats plugin to version 1.6.2 or later.
3
What versions of FireStats are affected by CVE-2009-2143?
CVE-2009-2143 affects all versions of FireStats prior to 1.6.2.
4
What is the impact of CVE-2009-2143?
The impact of CVE-2009-2143 is the potential for remote code execution, which can compromise the security of the affected WordPress site.
5
Is CVE-2009-2143 specific to WordPress?
Yes, CVE-2009-2143 is a vulnerability specifically found in the FireStats plugin for WordPress.