CVE-2009-4896
MEDIUM · CVSS 6.5EPSS 1.8%EU EUVD
Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.
Key facts
- CVSS score
- 6.5 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:S/C:P/I:P/A:P- Weakness (CWE)
- CWE-22
- EPSS score
- 1.8% (79th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2009-4859)
- Published
- August 2, 2010
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2009-4859 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- mlmmj / mlmmj
- mlmmj / mlmmj
- mlmmj / mlmmj
References
- http://bugs.gentoo.org/show_bug.cgi?id=259968
- http://mlmmj.org/node/84
- http://secunia.com/advisories/40658(Vendor Advisory)
- http://www.debian.org/security/2010/dsa-2073
- http://www.openwall.com/lists/oss-security/2010/06/23/5
- http://www.openwall.com/lists/oss-security/2010/06/23/6
- http://www.openwall.com/lists/oss-security/2010/06/25/2
- http://www.openwall.com/lists/oss-security/2010/06/26/1(Patch)
- http://www.openwall.com/lists/oss-security/2010/07/04/4
- http://www.openwall.com/lists/oss-security/2010/07/06/1
- https://bugzilla.redhat.com/show_bug.cgi?id=607256
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain