CVE-2009-0325
published 2009-01-29CVE-2009-0325: Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files…
PriorityP430medium4.3CVSS 2.0
AVNACMAuNCPINAN
EXPLOIT
EPSS
2.56%
83.1th percentile
Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ninjadesigns | ninja_blog | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/33573http://www.push55.co.uk/index.php?s=ad&id=6http://www.securityfocus.com/bid/33351https://www.exploit-db.com/exploits/7831https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txthttp://secunia.com/advisories/33573http://www.push55.co.uk/index.php?s=ad&id=6http://www.securityfocus.com/bid/33351https://www.exploit-db.com/exploits/7831https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt
2009-01-29
Published