CVE-2009-1770 - Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .

Back Back to CVE browser

HIGH

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .

Published May 22, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.33%

Description

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

http://www.securityfocus.com/bid/35011
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1367
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1765
Advisory
https://www.exploit-db.com/exploits/8714
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/35011		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1367		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1765		Advisory
https://www.exploit-db.com/exploits/8714		exploitx_refsource_EXPLOIT-DB