CVE-2009-1090

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-25 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.

Affected products

Th3-822 Rapidleech: through rev.36

References

http://osvdb.org/52753
http://secunia.com/advisories/34300
http://security.bkis.vn/?p=345
http://www.securityfocus.com/archive/1/501854/100/0/threaded
http://www.securityfocus.com/bid/34119
https://exchange.xforce.ibmcloud.com/vulnerabilities/49256
http://osvdb.org/52753
http://secunia.com/advisories/34300
http://security.bkis.vn/?p=345
http://www.securityfocus.com/archive/1/501854/100/0/threaded
http://www.securityfocus.com/bid/34119
https://exchange.xforce.ibmcloud.com/vulnerabilities/49256

Get alerted when CVE-2009-1090 or the next vulnerability affects your stack