QwikSec

Security Database

CVE

CWE

Training

CVE-2009-4896

Published: Aug 2, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://mlmmj.org/node/84

x_refsource_CONFIRM

[oss-security] 20100626 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

http://bugs.gentoo.org/show_bug.cgi?id=259968

x_refsource_CONFIRM

[oss-security] 20100625 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

[oss-security] 20100623 CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=607256

x_refsource_CONFIRM

[oss-security] 20100706 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

[oss-security] 20100623 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

[oss-security] 20100704 Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.