Unrated severityNVD Advisory· Published Oct 13, 2009· Updated Apr 23, 2026
CVE-2009-3694
CVE-2009-3694
Description
Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg[prePath] parameter.
Affected products
1- cpe:2.3:a:jdtmmsm:ezrecipe-zee:91:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- securityreason.com/expldownload/1/7380/1nvdExploit
- secunia.com/advisories/36992nvdVendor Advisory
- osvdb.org/58709nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53696nvd
News mentions
0No linked articles in our index yet.