← Database

CVE-2009-3515

MEDIUM CVSS: 6.5 Published: 2009-10-01 Modified: 2026-06-16

Description

Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the type parameter.

Affected Platforms

Marcin Manek D.Net Cms

Weakness Type

CWE-22

References