Unscored severity · published Jul 20, 2009
CVE-2009-2552
Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Super Simple Blog Script · Supersimple
2.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2552
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2552
Vendor Advisory
http://secunia.com/advisories/35859
www.exploit-db.com
http://www.exploit-db.com/exploits/9179
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/51805
More from Super Simple Blog Script
–
CVE-2009-2553
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL…