Security Advisory

CVE-2009-3542

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-10-02 19:00:00

Last updated 2024-08-07 06:31:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

← Browse all CVEs View on cve.org ↗