CVE-2009-2180

2009-06-2321:21:00

mitre

www.cve.org

AI Score

6.9

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a … (dot dot) or (2) absolute path in the file parameter.

References

osvdb.org/55314

www.exploit-db.com/exploits/8988