VulnerabilityModified

CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a ..

HIGH 7.5EPSS 28.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 28.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 28.83% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: pnphpbb/pnphpbb2
Source: cve@mitre.org

References

http://secunia.com/advisories/33365Vendor Advisory
http://www.securityfocus.com/bid/33103Exploit
https://www.exploit-db.com/exploits/7658
http://secunia.com/advisories/33365Vendor Advisory
http://www.securityfocus.com/bid/33103Exploit
https://www.exploit-db.com/exploits/7658

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.