CVEvulnerability
CVE-2009-1090
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.
Affected configurations
• rapidleech rapidleech (<= rev.36)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/52753 osvdb.org
- http://secunia.com/advisories/34300 Vendor Advisory
- http://security.bkis.vn/?p=345 security.bkis.vn
- http://www.securityfocus.com/archive/1/501854/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34119 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49256 exchange.xforce.ibmcloud.com
- http://osvdb.org/52753 osvdb.org
- http://secunia.com/advisories/34300 Vendor Advisory
- http://security.bkis.vn/?p=345 security.bkis.vn
- http://www.securityfocus.com/archive/1/501854/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34119 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49256 exchange.xforce.ibmcloud.com