CVE-2009-2931

HIGH 7.8CVE-2009-2931 · Published 21/08/2009 · updated 16/06/2026

In short

CVE-2009-2931 is a HIGH (CVSS 7.8) vulnerability affecting director (slideshowpro).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
director slideshowpro	`= 1.1= 1.2= 1.3= 1.3.8`	No fix yet

Description

Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter.

References

secunia.com/advisories/36197 · Vendor Advisory
slideshowpro.net/news/archive/2009/07/director-139-fi.php · Vendor Advisory
clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
osvdb.org/56825
securityfocus.com/archive/1/505534/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free