Vulnerability Description
Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fretsweb Project | Fretsweb | 1.2 |
Related Weaknesses (CWE)
References
- http://osvdb.org/55166Broken Link
- http://osvdb.org/55196Broken Link
- http://secunia.com/advisories/35492Vendor Advisory
- https://www.exploit-db.com/exploits/8979Third Party AdvisoryVDB Entry
- http://osvdb.org/55166Broken Link
- http://osvdb.org/55196Broken Link
- http://secunia.com/advisories/35492Vendor Advisory
- https://www.exploit-db.com/exploits/8979Third Party AdvisoryVDB Entry
FAQ
What is CVE-2009-2109?
CVE-2009-2109 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fr...
How severe is CVE-2009-2109?
CVE-2009-2109 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-2109?
Check the references section above for vendor advisories and patch information. Affected products include: Fretsweb Project Fretsweb.