CVE-2009-2325

CVE-2009-2325 affects Clicknet CMS 2.1, via a directory traversal in index.php: an attacker can read arbitrary files by supplying .. in the side parameter. The NVD entry confirms the vulnerability with a CVSS v2 base score of 5.0 (Medium) and network access with no authentication. Several connect...