Security Advisory

CVE-2009-0448

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-02-05 20:00:00
Last updated 2024-08-07 04:31:26
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the synTarget parameter.