CVE

Id
42235  
CVE No.
CVE-2009-4800  
Status
Candidate  
Description
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.  
Phase
Assigned (20100422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461737 42235 CVE-2009-4800 MILW0RM:8256  View
461738 42235 CVE-2009-4800 URL:http://www.milw0rm.com/exploits/8256  View
461739 42235 CVE-2009-4800 BID:34209  View
461740 42235 CVE-2009-4800 URL:http://www.securityfocus.com/bid/34209  View
461741 42235 CVE-2009-4800 OSVDB:52959  View
461742 42235 CVE-2009-4800 URL:http://osvdb.org/52959  View
461743 42235 CVE-2009-4800 SECUNIA:34433  View
461744 42235 CVE-2009-4800 URL:http://secunia.com/advisories/34433  View
461745 42235 CVE-2009-4800 XF:sysax-ftpdele-directory-traversal(49360)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38612 JVNDB-2010-004397 TYPO3 用の Calendar Base エクステンションにおけるクロスサイトスクリプティングの脆弱性 TYPO3 用の Calendar Base (cal) エクステンションには、Internet Explorer 6 を使用している際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4804 42235 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004397.html  View