CVE-2009-4192

Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score
CVSS 2.0 5.0 Medium
Status
Modified - cve@mitre.org
Published
2009-12-03
Last modified
2024-09-16
Weaknesses
CWE-22

Affected products

References