CVE-2009-0290

no score yetEPSS 3.3%

sir gnuboard: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the g4_path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname.

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2009-01-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sir:gnuboard

References

http://secunia.com/advisories/33564
http://www.securityfocus.com/bid/33304
https://exchange.xforce.ibmcloud.com/vulnerabilities/48015
https://www.exploit-db.com/exploits/7792
http://secunia.com/advisories/33564

Check your stack JSON