Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj_id parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-12-31T19:00:00
Updated: 2024-08-07T07:08:38.387Z
Reserved: 2009-12-31T00:00:00
Link: CVE-2009-4512
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-12-31T19:30:00.217
Modified: 2024-11-21T01:09:48.417
Link: CVE-2009-4512
Redhat
No data.