CVE-2009-5031

ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header.

• CWE-79

• http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlMailing List, Third Party Advisory
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGESBroken Link
• http://secunia.com/advisories/49576Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/54156Third Party Advisory, VDB Entry
• http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdfThird Party Advisory
• https://www.modsecurity.org/fisheye/browse/modsecurity/m2/branches/2.5.x/apache2/msc_multipart.c?r2=1419&r1=1366Broken Link
• http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.htmlMailing List, Third Party Advisory
• http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGESBroken Link
• http://secunia.com/advisories/49576Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/06/22/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/54156Third Party Advisory, VDB Entry
• http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdfThird Party Advisory
• https://www.modsecurity.org/fisheye/browse/modsecurity/m2/branches/2.5.x/apache2/msc_multipart.c?r2=1419&r1=1366Broken Link

Published

Jul 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5025A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 wh…7.5
• CVE-2009-5026The executable comment feature in MySQL 5.0.x before 5.0.93 …
• CVE-2009-5027Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-5028Stack-based buffer overflow in Namazu before 2.0.20 allows r…
• CVE-2009-5029Integer overflow in the __tzfile_read function in glibc befo…
• CVE-2009-5030The tcd_free_encode function in tcd.c in OpenJPEG 1.3 throug…
• CVE-2009-5032The encrypted e-mail feature in IBM Lotus Notes Traveler bef…
• CVE-2009-5033IBM Lotus Notes Traveler before 8.5.0.2 does not properly ha…
• CVE-2009-5034IBM Lotus Notes Traveler before 8.5.0.2 allows remote authen…
• CVE-2009-5035The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 …
• CVE-2009-5036traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 …
• CVE-2009-5037Cisco Adaptive Security Appliances (ASA) 5500 series devices…