7.8
CVSSv2

CVE-2009-4645

Published: 19/02/2010 Updated: 17/08/2017
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 785
Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance prior to 8_0_105 allows remote malicious users to read arbitrary files via a .. (dot dot) in the lang parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

accellion secure file transfer appliance 7_0_189

accellion secure file transfer appliance 7_0_259

accellion secure file transfer appliance 7_0_296

accellion secure file transfer appliance 7_0_135

accellion secure file transfer appliance 7_0_178

Exploits

source: wwwsecurityfocuscom/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A directory-traversal issue - An HTML-injection issue - A remote command-injection issue An attacker may leverage these issues to execute arbitrary script code with ...