CVE-2009-0325 - Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .

Published Jan 29, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 2.56%

Description

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (6)

http://secunia.com/advisories/33573
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.push55.co.uk/index.php?s=ad&id=6
x_refsource_MISCURL Repurposed
http://www.securityfocus.com/bid/33351
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0329
Advisory
https://www.exploit-db.com/exploits/7831
exploitx_refsource_EXPLOIT-DB
https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt
x_refsource_MISCExploitURL Repurposed

Link	Providers	Tags
http://secunia.com/advisories/33573		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.push55.co.uk/index.php?s=ad&id=6		x_refsource_MISCURL Repurposed
http://www.securityfocus.com/bid/33351		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0329		Advisory
https://www.exploit-db.com/exploits/7831		exploitx_refsource_EXPLOIT-DB
https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt		x_refsource_MISCExploitURL Repurposed