CVE-2009-4231

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-12-08 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the plugin parameter.

Affected products

Basic-Cms Sweetrice: through 0.5.3; 0.2.0, 0.2.1, 0.3.0, 0.4.0, 0.4.1, 0.4.2 (+2)

References

http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt
http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt

Get alerted when CVE-2009-4231 or the next vulnerability affects your stack