CVE-2009-1089
rapidleech < rev36 - Unauthenticated Path Traversal via Base64-Encoded Filename Parameter
Title source: llmDescription
Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.
References (5)
Core 5
Core References
Various Sources x_refsource_misc
http://security.bkis.vn/?p=345
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49253
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34300
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34119
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/501854/100/0/threaded
Scores
EPSS
0.0133
EPSS Percentile
67.6%
Details
CWE
CWE-22
Status
published
Products (1)
rapidleech/rapidleech
< rev36
Published
Mar 25, 2009
Tracked Since
Feb 18, 2026