5
CVSSv2

CVE-2009-2180

Published: 23/06/2009 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and previous versions allow remote malicious users to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

pc4arb pc4 uploader 10.0

Exploits

|| || | || o_,_7 _|| _o_7 _|| q_|_|| o_\\\_, ( : / (_) / ( ___________________ _/QQQQQQQQQQQQQQQQQQQ\__ ...