← Database

CVE-2009-4231

HIGH CVSS: 7.5 Published: 2009-12-08 Modified: 2026-06-16

Description

Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the plugin parameter.

Affected Platforms

Basic-Cms Sweetrice

Weakness Type

CWE-22

References