CVE-2009-4415
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local files via the conv_type parameter in addressbook/inc/class.uiXport.inc.php.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/35519https://exchange.xforce.ibmcloud.com/vulnerabilities/51921https://exchange.xforce.ibmcloud.com/vulnerabilities/51924http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupwarehttp://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupwarehttp://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupwarehttp://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117http://www.openwall.com/lists/oss-security/2009/12/20/1http://www.osvdb.org/56177http://www.osvdb.org/56180http://www.securityfocus.com/bid/35761