CVE-2009-3787: Path Traversal
files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3787?
CVE-2009-3787 is considered a high severity vulnerability due to the potential for directory traversal attacks.
How do I fix CVE-2009-3787?
To fix CVE-2009-3787, update Vivvo CMS to a version later than 4.1.5.1 that addresses this vulnerability.
What types of attacks can CVE-2009-3787 enable?
CVE-2009-3787 can enable remote attackers to read arbitrary files from the server, leading to information disclosure.
Is CVE-2009-3787 specific to any version of Vivvo CMS?
Yes, CVE-2009-3787 specifically affects Vivvo CMS version 4.1.5.1.
How do directory traversal attacks related to CVE-2009-3787 work?
Directory traversal attacks related to CVE-2009-3787 exploit improper validation of file paths, allowing unauthorized access to sensitive files.