← Database

CVE-2009-0325

MEDIUM CVSS: 4.3 Published: 2009-01-29 Modified: 2026-06-16

Description

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.

Affected Platforms

Ninjadesigns Ninja Blog

Weakness Type

CWE-22

References