Security Advisory

CVE-2009-3425

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-09-25 22:00:00
Last updated 2024-08-07 06:31:08
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter.