CVE-2009-2180

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-06-23

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Pc4 Uploader (Pc4arb)

References

• http://osvdb.org/55314
• https://www.exploit-db.com/exploits/8988