[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-4088

Date: (C)2009-11-29   (M)2017-08-18
 
CVSS Score: 6.8Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.

Reference:
SECUNIA-37391
OSVDB-60216
OSVDB-60217
OSVDB-60218
EXPLOIT-DB-9483
http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/
http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
teleparkwiki-multiple-file-include(54327)

CWE    1
CWE-22

© 2013 SecPod Technologies