Elgg

elgg

Vendor: Curveriderhq • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2009-3149

1Curveriderhq

1Elgg

Apr 23, 2026

Sep 10, 2009

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the js parameter. NOTE: some of these details are ob...Show more