Path Traversal in Php-Sugar

CVE-2009-2398

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.

Affected products

  • Php-sugar — versions 0.80
  • N/a — versions n/a

Weakness classification (CWE)

References