Unscored severity · published Feb 24, 2009
CVE-2009-0729
Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Page Engine Cms · Lingx
2.0; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0729
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0729
osvdb.org
http://osvdb.org/52175
osvdb.org
http://osvdb.org/52176
osvdb.org
http://osvdb.org/52177
osvdb.org
http://osvdb.org/52178
Vendor Advisory
http://secunia.com/advisories/33983
www.securityfocus.com
http://www.securityfocus.com/bid/33860