CVE-2009-2338

Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to…

published July 7, 2009

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_file parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01979 · 80.4th percentile
Published
2009-07-07T18:35Z
EPSS history
Timeline
  • 07 JUL 18:35Z
    Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to…
    cvelistv5