← back
CVE-2009-1846

CVE-2009-1846

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.3%
exploitation probability
2.3%top 19% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the THEME_FOLDER parameter to (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, and (5) Structure/homepage.php in themes/.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.