CVE-2009-3787

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in…

published October 26, 2009

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06577 · 93.8th percentile
Published
2009-10-26T17:00Z
EPSS history
Timeline
  • 26 OCT 17:00Z
    files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in…
    cvelistv5