Directory Traversal Vulnerability in Quickdev 4 PHP
CVE-2009-4726

Currently unrated

Key Information:

Vendor

Olivier Michaud Pierre-yves

Status
Quickdev4PHP
Vendor
CVE Published:
18 March 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-4726?

A directory traversal vulnerability exists in the Quickdev 4 PHP download.php script, allowing remote attackers to access sensitive files on the server by manipulating the file parameter with '../' sequences. This flaw can lead to unauthorized reading of arbitrary files, posing significant risk to the security and integrity of the affected systems.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-4726 - Proof of Concept

References

http://www.exploit-db.com/exploits/9334
exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2009/2126
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/36130
third-party-advisoryx_refsource_SECUNIA

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.