Unrated severityNVD Advisory· Published Jan 30, 2009· Updated Jun 16, 2026
CVE-2009-0372
CVE-2009-0372
Description
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
34cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*+ 33 more
- cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*range: <=4.0.1
- cpe:2.3:a:memht:memht_portal:1.0:final:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:1.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:1.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.0:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.9:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:2.9:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.0:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.1:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.1:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.2:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.3:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.3:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4.5:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4.5:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.4:update:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.5.0:full:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:memht:memht_portal:3.9.0:*:*:*:*:*:*:*
- (no CPE)range: <=4.0.1
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/33424nvdExploitPatch
- secunia.com/advisories/33626nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/48199nvd
- www.exploit-db.com/exploits/7859nvd
News mentions
0No linked articles in our index yet.