CVE-2009-2931

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.87%

Published

Aug 21, 2009

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter.

Weaknesses (CWE)

CWE-22

Affected Products (4)

slideshowpro · directorvulnerable

References (10)

http://secunia.com/advisories/36197

Vendor Advisory

http://slideshowpro.net/news/archive/2009/07/director-139-fi.php

Vendor Advisory

http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf

http://www.osvdb.org/56825

http://www.securityfocus.com/archive/1/505534/100/0/threaded

http://secunia.com/advisories/36197

Vendor Advisory

http://slideshowpro.net/news/archive/2009/07/director-139-fi.php

Vendor Advisory

http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf

http://www.osvdb.org/56825

http://www.securityfocus.com/archive/1/505534/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs