CVEvulnerability
CVE-2009-4088
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.
Affected configurations
• telepark telepark.wiki (<= 2.4.23)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ Patch
- http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt Exploit
- http://secunia.com/advisories/37391 Vendor Advisory
- http://www.exploit-db.com/exploits/9483 www.exploit-db.com
- http://www.osvdb.org/60216 www.osvdb.org
- http://www.osvdb.org/60217 www.osvdb.org
- http://www.osvdb.org/60218 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54327 exchange.xforce.ibmcloud.com
- http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ Patch
- http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt Exploit
- http://secunia.com/advisories/37391 Vendor Advisory
- http://www.exploit-db.com/exploits/9483 www.exploit-db.com
- http://www.osvdb.org/60216 www.osvdb.org
- http://www.osvdb.org/60217 www.osvdb.org
- http://www.osvdb.org/60218 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54327 exchange.xforce.ibmcloud.com