CVE-2009-4800

Sysax Multi Server - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Jonathan Salwan · cremotewindows

https://www.exploit-db.com/exploits/8256

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/52959

[Vendor Advisory] http://secunia.com/advisories/34433

[Exploit] http://www.securityfocus.com/bid/34209

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/49360

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/8256

Scores

EPSS 0.0243

EPSS Percentile 85.2%

Details

CWE

CWE-22

Status published

Products (2)

sysax/multi_server 4.3

sysax/multi_server 4.5

Published Apr 22, 2010

Tracked Since Feb 18, 2026