CVE-2009-2229

CVE-2009-2229 is a directory traversal vulnerability in Kasseler CMS (notably versions 1.3.0 and 1.3.5 lite) where an attacker can read arbitrary files by supplying a .. sequence in the file parameter during a download action. The vulnerability affects the engine.php download flow, with impact de...