← back
CVE-2009-4421

CVE-2009-4421

EPSS 2.0%
Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/10604unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0398.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/54970http://www.securityfocus.com/archive/1/508546/100/0/threadedhttp://www.securityfocus.com/bid/37434