Beveiligingsadvies

CVE-2009-4581

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2010-01-06 21:33:00
Laatst bijgewerkt 2024-08-07 07:08:37
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter.