CVE

Id
42251  
CVE No.
CVE-2009-4816  
Status
Candidate  
Description
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.  
Phase
Assigned (20100427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461836 42251 CVE-2009-4816 EXPLOIT-DB:10599  View
461837 42251 CVE-2009-4816 URL:http://www.exploit-db.com/exploits/10599  View
461838 42251 CVE-2009-4816 OSVDB:61270  View
461839 42251 CVE-2009-4816 URL:http://osvdb.org/61270  View
461840 42251 CVE-2009-4816 SECUNIA:37873  View
461841 42251 CVE-2009-4816 URL:http://secunia.com/advisories/37873  View
461842 42251 CVE-2009-4816 XF:theuploader-filename-dir-traversal(54974)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37932 JVNDB-2010-003717 Angelo-Emlak におけるデータベースをダウンロードされる脆弱性 Angelo-Emlak は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2009-4820 42251 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003717.html  View