high7.8
CVE-2009-2931
Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal s…
Impact
Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slideshowpro | Director | Versions 1.1, 1.2, 1.3, 1.3.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/36197
- http://slideshowpro.net/news/archive/2009/07/director-139-fi.php
- http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
- http://www.osvdb.org/56825
- http://www.securityfocus.com/archive/1/505534/100/0/threaded
- http://secunia.com/advisories/36197
- http://slideshowpro.net/news/archive/2009/07/director-139-fi.php
- http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
- http://www.osvdb.org/56825
- http://www.securityfocus.com/archive/1/505534/100/0/threaded