CVE-2009-4421

Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary…

published December 24, 2009

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01999 · 80.6th percentile
Published
2009-12-24T17:00Z
EPSS history
Timeline
  • 24 DEC 17:00Z
    Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary…
    cvelistv5