VulnerabilityModified
CVE-2009-4512
Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a ..
MEDIUM 5.1EPSS 2.08%
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj_id parameter.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 2.08% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- indymedia/oscailt
- Source
- cve@mitre.org
References
- http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txtExploit
- http://secunia.com/advisories/37180Vendor Advisory
- http://securityreason.com/exploitalert/7422Exploit
- http://www.vupen.com/english/advisories/2009/3096Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54023
- http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txtExploit
- http://secunia.com/advisories/37180Vendor Advisory
- http://securityreason.com/exploitalert/7422Exploit
- http://www.vupen.com/english/advisories/2009/3096Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54023
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.