CVE-2009-4427

EPSS 10.0%

Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/10410unverified exploitdbwww.exploit-db.com/exploits/10410unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/37848 http://www.exploit-db.com/exploits/10410 http://www.mandriva.com/security/advisories?name=MDVSA-2010:023 http://www.osvdb.org/61139 http://www.securityfocus.com/bid/37327