CVE-2009-0596

2009-02-1617:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

69.1%

JSON

Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter.

References

secunia.com/advisories/33382

www.securityfocus.com/bid/33092

www.exploit-db.com/exploits/7648