CVE-2009-3542: Path Traversal
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3542?
CVE-2009-3542 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2009-3542?
To fix CVE-2009-3542, update LittleSite to the latest version that addresses this directory traversal vulnerability.
What type of vulnerability is CVE-2009-3542?
CVE-2009-3542 is a directory traversal vulnerability that allows attackers to access arbitrary files on the local system.
What software is affected by CVE-2009-3542?
CVE-2009-3542 affects LittleSite version 0.1.
Can CVE-2009-3542 lead to remote file inclusion?
Yes, CVE-2009-3542 can potentially be leveraged for remote file inclusion in certain environments.