high7.5Public exploit code
CVE-2009-1445
Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions2009-04-22 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivano Culmine | Webportal Cms | Version 0.8 |