CVE-2009-0286
LOW 2.6EPSS 5.6%
Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the form_data[script_class] parameter.
- CVSS v2.0 NVD
- 2.6 LOW
AV:N/AC:H/Au:N/C:P/I:N/A:N - EPSS
- 5.56% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2009-01-27
- Updated
- 2024-08-07