CVE-2009-4800

2010-04-2214:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

76.0%

JSON

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a …// (dot dot slash slash) in a DELE command.

References

osvdb.org/52959

secunia.com/advisories/34433

www.exploit-db.com/exploits/8256

www.securityfocus.com/bid/34209

exchange.xforce.ibmcloud.com/vulnerabilities/49360