CVE-2009-4231

2022-10-0316:24:04

mitre

www.cve.org

sweetrice

directory traversal

remote attackers

arbitrary local files

7.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.7%

JSON

Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via … (dot dot) in the plugin parameter.

References

packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt