CVE-2009-1090
rapidleech < rev.36 - Remote Code Execution via Directory Traversal in upload.php
Title source: llmDescription
Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49256
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/52753
Various Sources x_refsource_misc
http://security.bkis.vn/?p=345
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34300
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34119
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/501854/100/0/threaded
Scores
EPSS
0.0146
EPSS Percentile
70.5%
Details
CWE
CWE-22
Status
published
Products (1)
rapidleech/rapidleech
< rev.36
Published
Mar 25, 2009
Tracked Since
Feb 18, 2026