Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://bugs.gentoo.org/show_bug.cgi?id=259968 - | |
| References | () http://mlmmj.org/node/84 - | |
| References | () http://secunia.com/advisories/40658 - Vendor Advisory | |
| References | () http://www.debian.org/security/2010/dsa-2073 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/06/23/5 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/06/23/6 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/06/25/2 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/06/26/1 - Patch | |
| References | () http://www.openwall.com/lists/oss-security/2010/07/04/4 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/07/06/1 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=607256 - |
Information
Published : 2010-08-02 20:40
Updated : 2024-11-21 01:10
NVD link : CVE-2009-4896
Mitre link : CVE-2009-4896
CVE.ORG link : CVE-2009-4896
JSON object : View
Products Affected
mlmmj
- mlmmj
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')