CVE-2009-2379

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• BigACE 2.6 - 'cmd' Local File Inclusion2009-06-30 · webapps · php · Verified

Impact

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://forum.bigace.de/announcements/security-patch-for-bigace-2-6
• http://osvdb.org/55510
• http://secunia.com/advisories/35643
• http://securitytracker.com/id?1022489
• http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html
• http://www.exploit-db.com/exploits/9052
• http://www.securityfocus.com/bid/35537
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51444
• http://forum.bigace.de/announcements/security-patch-for-bigace-2-6
• http://osvdb.org/55510
• http://secunia.com/advisories/35643
• http://securitytracker.com/id?1022489
• http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html
• http://www.exploit-db.com/exploits/9052
• http://www.securityfocus.com/bid/35537
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51444