Unrated severityNVD Advisory· Published Dec 24, 2009· Updated Apr 23, 2026
CVE-2009-4415
CVE-2009-4415
Description
Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local files via the conv_type parameter in addressbook/inc/class.uiXport.inc.php.
Affected products
1- cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.12:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- secunia.com/advisories/35519nvdVendor Advisory
- svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.phpnvd
- svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.phpnvd
- svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOGnvd
- svn.savannah.gnu.org/viewvcnvd
- www.openwall.com/lists/oss-security/2009/12/20/1nvd
- www.osvdb.org/56177nvd
- www.osvdb.org/56180nvd
- www.securityfocus.com/bid/35761nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/51921nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/51924nvd
News mentions
0No linked articles in our index yet.