Vulnerability Details CVE-2009-1089
Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.6%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/34300
- http://security.bkis.vn/?p=345
- http://www.securityfocus.com/archive/1/501854/100/0/threaded
- http://www.securityfocus.com/bid/34119
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49253
- http://secunia.com/advisories/34300
- http://security.bkis.vn/?p=345
- http://www.securityfocus.com/archive/1/501854/100/0/threaded
- http://www.securityfocus.com/bid/34119
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49253
Products affected by CVE-2009-1089
-
cpe:2.3:a:rapidleech:rapidleech:-
-
cpe:2.3:a:rapidleech:rapidleech:2.3
-
cpe:2.3:a:rapidleech:rapidleech:2021-09-11
-
cpe:2.3:a:rapidleech:rapidleech:rev36
-
cpe:2.3:a:rapidleech:rapidleech:rev_39
-
cpe:2.3:a:rapidleech:rapidleech:rev_40
-
cpe:2.3:a:rapidleech:rapidleech:rev_41
-
cpe:2.3:a:rapidleech:rapidleech:rev_42
-
cpe:2.3:a:rapidleech:rapidleech:rev_43