CVE-2009-3538

2009-10-0219:00:00

mitre

www.cve.org

cve-2009-3538

thumb.php

clear content 1.1

directory traversal

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a … (dot dot) in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

secunia.com/advisories/35726

www.osvdb.org/55743