CVE-2009-0290

2009-01-2719:00:00

mitre

www.cve.org

AI Score

7.8

Confidence

Low

EPSS

0.018

Percentile

88.4%

JSON

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the g4_path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname.