Enhancement: cves/2009/CVE-2009-4223.yaml by mp

cves/2009/CVE-2009-4223.yaml

@@ -1,15 +1,16 @@
 id: CVE-2009-4223
 
 info:
-  name: KR-Web <= 1.1b2 RFI
+  name: KR-Web <=1.1b2 - Remote File Inclusion
   author: geeknik
   severity: high
-  description: KR is a web content-server based on Apache-PHP-MySql technology which gives to programmers some PHP classes simplifying database content access. Additionally, it gives some admin and user tools to write, hierarchize, and authorize contents.
+  description: KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
   reference:
     - https://sourceforge.net/projects/krw/
     - https://www.exploit-db.com/exploits/10216
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/54395
     - http://www.exploit-db.com/exploits/10216
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-4223
   classification:
     cve-id: CVE-2009-4223
   tags: cve,cve2009,krweb,rfi
@@ -28,3 +29,5 @@ requests:
         part: interactsh_protocol
         words:
           - "http"
+
+# Enhanced by mp on 2022/06/06