CVE-2009-2330: Chainuk CMS admin menu lets attackers run scripts

The admin_menu.php page in Chainuk CMS version 1.2 and earlier can be tricked into running malicious code that an attacker supplies. This could let an attacker alter what users see or steal information when they view the admin pages. Apply the vendor’s security update or limit access to the admin area until the code is corrected.

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

• http://osvdb.org/55674
• http://www.exploit-db.com/exploits/9069