CVE-2009-1407

2009-04-2414:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.005

Percentile

75.8%

JSON

Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a … (dot dot) in a certain languages[][file] parameter.

References

www.securityfocus.com/bid/34636

exchange.xforce.ibmcloud.com/vulnerabilities/49988

www.exploit-db.com/exploits/8504