Vulnerability Details CVE-2009-2931
Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.2%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/36197
- http://slideshowpro.net/news/archive/2009/07/director-139-fi.php
- http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
- http://www.osvdb.org/56825
- http://www.securityfocus.com/archive/1/505534/100/0/threaded
- http://secunia.com/advisories/36197
- http://slideshowpro.net/news/archive/2009/07/director-139-fi.php
- http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
- http://www.osvdb.org/56825
- http://www.securityfocus.com/archive/1/505534/100/0/threaded
Products affected by CVE-2009-2931
-
cpe:2.3:a:slideshowpro:director:1.1
-
cpe:2.3:a:slideshowpro:director:1.2
-
cpe:2.3:a:slideshowpro:director:1.3
-
cpe:2.3:a:slideshowpro:director:1.3.8