CVE-2009-4088

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.80%

Published

Nov 29, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBtelepark wiki 2.4.23 - Multiple Vulnerabilities Exploit-DBPhotodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.

Weaknesses (CWE)

CWE-22

Affected Products (1)

telepark · telepark.wikivulnerable

References (16)

http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/

Patch

http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt

Exploit

http://secunia.com/advisories/37391

Vendor Advisory

http://www.exploit-db.com/exploits/9483