← Database

CVE-2009-4672

HIGH CVSS: 7.5 Published: 2010-03-05 Modified: 2026-06-16

Description

Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter.

Affected Platforms

Grupenet Wp-LyteboxWordpress Wordpress

Weakness Type

CWE-22

References