peter bassill · operator
$ cve CVE-2009-4957 JSON

CVE-2009-4957 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 2.4% (pctl 83)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel parameter.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS2.36% — more likely to be exploited than 83% of all CVEs
WeaknessCWE-22
On CISA KEVno
Public exploityes
Published2010-07-22
Last modified2026-06-16

Affected (1)

VendorProduct
interspireactivekb

Public exploits

SourceTitleDate
exploit-dbActiveKB KnowledgeBase - 'Panel' Local File Inclusion2009-04-03

References

→ the Explorer  ·  watch your stack  ·  NVD