medium5.0Public exploit code
CVE-2009-2397
Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Audio Article Directory - 'file' Remote File Disclosure2009-06-29 · webapps · php · Verified
Impact
Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Audioarticledirectory | Audio Article Directory | All versions |