Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2010-08-02T19:00:00Z
Updated: 2010-08-02T19:00:00Z
Reserved: 2010-06-15T00:00:00Z
Link: CVE-2009-4896
JSON object: View
NVD Information
Status : Analyzed
Published: 2010-08-02T20:40:00.217
Modified: 2010-08-03T04:00:00.000
Link: CVE-2009-4896
JSON object: View
Redhat Information
No data.
CWE