CVE-2009-0729

State: Published
Severity: Not scored
Published: Feb 24, 2009
Updated: Aug 7, 2024
Reserved: Feb 24, 2009

Description

Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

52178vdb-entry
52177vdb-entry
pageengine-fprefix-file-include(48856)vdb-entry
52175vdb-entry
52176vdb-entry
33860vdb-entry
33983third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.