CVE-2009-0325

MEDIO 4.3CVE-2009-0325 · Published 29/01/2009 · updated 16/06/2026

En resumen

CVE-2009-0325 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a ninja blog (ninjadesigns).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ninja blog ninjadesigns	`= 4.8`	No fix yet

Description

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.

References

secunia.com/advisories/33573 · Vendor Advisory
push55.co.uk/index.php · URL Repurposed
securityfocus.com/bid/33351 · Exploit
exploit-db.com/exploits/7831
push55.co.uk/poclibrary/ninjadesignscouk-1.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free