VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 19, 2009· Updated Jun 16, 2026

CVE-2009-2132

CVE-2009-2132

Description

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • 4homepages/4images13 versions
    cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*range: <=1.7.6
    • cpe:2.3:a:4homepages:4images:1.0:rc-1:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.0:rc-2:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*
    • (no CPE)range: <1.7.7

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.