CVE-2009-0729 | BDVDB-2026-35166 Detail

Description#

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/52178
http://osvdb.org/52177
https://exchange.xforce.ibmcloud.com/vulnerabilities/48856
http://osvdb.org/52175
http://osvdb.org/52176
http://www.securityfocus.com/bid/33860
http://secunia.com/advisories/33983

Exploit#

No public exploit known

History#

Version 12009-02-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.