Vulnerability Description
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Telepark | Telepark.Wiki | <= 2.4.23 |
Related Weaknesses (CWE)
References
- http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-securityPatch
- http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txtExploit
- http://secunia.com/advisories/37391Vendor Advisory
- http://www.exploit-db.com/exploits/9483
- http://www.osvdb.org/60216
- http://www.osvdb.org/60217
- http://www.osvdb.org/60218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54327
- http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-securityPatch
- http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txtExploit
- http://secunia.com/advisories/37391Vendor Advisory
- http://www.exploit-db.com/exploits/9483
- http://www.osvdb.org/60216
- http://www.osvdb.org/60217
- http://www.osvdb.org/60218
FAQ
What is CVE-2009-4088?
CVE-2009-4088 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php ...
How severe is CVE-2009-4088?
CVE-2009-4088 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4088?
Check the references section above for vendor advisories and patch information. Affected products include: Telepark Telepark.Wiki.