Vulnerability Details CVE-2009-4700
Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (dot dot) in the layout parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/56543
- http://secunia.com/advisories/35997
- http://www.exploit-db.com/exploits/9260
- http://www.securityfocus.com/bid/35813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52003
- http://osvdb.org/56543
- http://secunia.com/advisories/35997
- http://www.exploit-db.com/exploits/9260
- http://www.securityfocus.com/bid/35813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52003
Products affected by CVE-2009-4700
-
cpe:2.3:a:skadate:skadate_online_dating_software:*
-
cpe:2.3:a:skadate:skadate_online_dating_software:5.0
-
cpe:2.3:a:skadate:skadate_online_dating_software:6.0
-
cpe:2.3:a:skadate:skadate_online_dating_software:6.482