CVE-2009-0448

2009-02-0520:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the synTarget parameter.

References

www.securityfocus.com/bid/33601

www.vupen.com/english/advisories/2009/0319

exchange.xforce.ibmcloud.com/vulnerabilities/48496

www.exploit-db.com/exploits/7977