CVE-2009-1768

no score yetEPSS 3.5%

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2009-05-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ramazeiten:ramazaitencms0.9.7.5
ramazeiten:ramazaitencms0.9.7.6
ramazeiten:ramazaitencms0.9.7.8
ramazeiten:ramazaitencms0.9.8

References

http://osvdb.org/54546
http://secunia.com/advisories/35116
http://www.securityfocus.com/bid/34995
http://www.vupen.com/english/advisories/2009/1343
https://exchange.xforce.ibmcloud.com/vulnerabilities/50572

Check your stack JSON