CVE-2009-3284

Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to read arbitrary files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-09-22

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Php & Css Bbs (Phpspot)
• Php Bbs (Phpspot)
• Php Bbs Ce (Phpspot)
• Php Image Capture Bbs (Phpspot)
• Php Rss Builder (Phpspot)
• Webshot (Phpspot)

References

• http://jvn.jp/en/jp/JVN65914253/index.html
• http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html
• http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html
• http://secunia.com/advisories/36783