← Database

CVE-2009-3425

MEDIUM CVSS: 5.0 Published: 2009-09-25 Modified: 2026-06-16

Description

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter.

Affected Platforms

Databay Maxcms

Weakness Type

CWE-22

References