[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIcW6I04BMxERBUiDTLN6CfAGKuiOxleq1nbtYdEucv4":3,"g5a-risk:CVE-2009-2255":177},{"success":4,"data":5,"meta":175},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":66,"references":67,"referencesCount":112,"weaknesses":113,"weaknessesCount":121,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":122,"seoMetadata":123,"configurations":148,"relatedVendorCves":173,"notableEvents":174},"CVE-2009-2255","What is CVE-2009-2255?","Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin\u002Frecord_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images\u002F.","Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin\u002Frecord_company.php, which allows remote attackers to execute arb...","2009-06-30T10:30:19","2026-06-16T23:09:04.987",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.30966,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51,54,57,60,63],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"zen-cart","zen_cart","*","cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"1.1.0","cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"1.1.3","cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"1.2.0d","cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"1.2.1d","cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":55,"criteria":56,"vulnerable":4},"1.2.4d","cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":58,"criteria":59,"vulnerable":4},"1.3.6","cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":61,"criteria":62,"vulnerable":4},"1.3.7","cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":64,"criteria":65,"vulnerable":4},"1.3.8","cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*",9,[68,73,77,81,87,91,94,98,100,102,104,106,108,110],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F35550","Secunia",[72],"Vendor Advisory",{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F9004","Exploit-db",[],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww.osvdb.org\u002F55344","Osvdb",[],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F35467","Securityfocus",[85,86],"Exploit","Patch",{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.zen-cart.com\u002Fforum\u002Fattachment.php?attachmentid=5965","Zen-cart",[86],{"url":92,"source":89,"tags":93},"http:\u002F\u002Fwww.zen-cart.com\u002Fforum\u002Fshowthread.php?t=130161",[86],{"url":95,"source":96,"tags":97},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F51316","Ibmcloud",[],{"url":69,"source":70,"tags":99},[72],{"url":74,"source":75,"tags":101},[],{"url":78,"source":79,"tags":103},[],{"url":82,"source":83,"tags":105},[85,86],{"url":88,"source":89,"tags":107},[86],{"url":92,"source":89,"tags":109},[86],{"url":95,"source":96,"tags":111},[],14,[114],{"id":115,"name":116,"description":117,"extendedDescription":27,"status":118,"abstraction":119,"structure":120},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":124,"metaDescription":125,"keywords":126,"canonicalUrl":127,"structuredData":128},"What is CVE-2009-2255? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-2255, a medium severity cyber security vulnerability from 2009. High exploit probability (31.0%). Zen Cart 1.3.8a, 1.3.8, ...","CVE-2009-2255, CVE-2009-2255 vulnerability, CVE-2009-2255 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, zen-cart security, zen_cart vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2009-2255",{"@context":129,"@type":130,"headline":124,"description":125,"datePublished":10,"dateModified":11,"author":131,"publisher":135,"about":139,"mainEntityOfPage":143,"articleSection":146,"keywords":147},"https:\u002F\u002Fschema.org","TechArticle",{"@type":132,"name":133,"url":134},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":132,"name":133,"url":134,"logo":136},{"@type":137,"url":138},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":140,"name":6,"description":141,"additionalType":142},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":144,"@id":145},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-2255","Cybersecurity","CVE-2009-2255, CVE-2009-2255 vulnerability, CVE-2009-2255 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[149],{"Operator":28,"Negate":28,"Nodes":150},[151],{"Operator":152,"Negate":31,"CPEMatch":153},"OR",[154,157,159,161,163,165,167,169,171],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":155,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":156},"37FB73EA-495B-4C6C-99D2-E10F26AB7A78","1.3.8a",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":158,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8C929C74-3510-4A89-96CF-2109271008E6",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":160,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":162,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C27DEB51-7745-4B5A-9E23-5491526E857E",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":164,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"96BA0248-CF20-4DF4-AF6B-4E9CACE8109B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":166,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"82CED1DF-15F5-47A2-9C70-F276B466167E",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":168,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BDB743EA-A17B-406C-81CE-64A52FBB5966",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":170,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1BE00024-0295-43BE-8123-56526197B58E",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":172,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AE050A6F-DF2A-47E8-8188-59BC00C11E70",[],[],{"lastModified":11,"cacheTime":176,"version":22},1792364637391,{"score":178,"band":35,"action":179,"scoredAt":180},45,"Plan remediation","2026-10-17T06:36:45.334314+00:00"]