CVE-2009-4800

EPSS 1.9%

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/8256unverified exploitdbwww.exploit-db.com/exploits/8256unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/52959 http://secunia.com/advisories/34433 https://exchange.xforce.ibmcloud.com/vulnerabilities/49360 http://www.exploit-db.com/exploits/8256 http://www.securityfocus.com/bid/34209