CVE-2009-2132

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2009-06-19

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• 4images (4homepages)

References

• http://bbs.wolvez.org/topic/56/
• http://secunia.com/advisories/35427
• http://www.4homepages.de/forum/index.php?topic=15186.0