CVE-2009-2116

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/06/2009 Updated: 10/10/2018

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
skybluecanvas skybluecanvas 1.1

source: wwwsecurityfocuscom/bid/44397/info SkyBlueCanvas is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input Exploiting this issue requires administrative privileges and may allow an attacker to obtain sensitive information that could aid in further attacks SkyBlueCanvas 11 r2 ...

CWE-22 http://secunia.com/advisories/35478 http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html http://www.securityfocus.com/archive/1/504302/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/34919/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-2116

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect