VYPR
← All advisories
Unrated severityNVD Advisory· Published May 22, 2009· Updated Jun 16, 2026

CVE-2009-1765

CVE-2009-1765

Description

Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langpref parameter to (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, and (3) data/modules/albums/module_info.php, different vectors than CVE-2008-3194.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Pluck/Pluck2 versions
    cpe:2.3:a:pluck-cms:pluck:4.6.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pluck-cms:pluck:4.6.2:*:*:*:*:*:*:*
    • (no CPE)range: =4.6.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.