CVE-2009-1774

Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to example/index.php. NOTE: this was originally reported as an issue affecting the do parameter, but traversal with that parameter might depend on a modified example/index.php. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://secunia.com/advisories/28330Vendor Advisory
• http://www.securityfocus.com/bid/34971Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50562
• https://www.exploit-db.com/exploits/8681
• http://secunia.com/advisories/28330Vendor Advisory
• http://www.securityfocus.com/bid/34971Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50562
• https://www.exploit-db.com/exploits/8681

Published

May 22, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1768Directory traversal vulnerability in download.php in Rama Za…
• CVE-2009-1769The web interface in Open Computer and Software Inventory Ne…
• CVE-2009-1770Directory traversal vulnerability in includes/database/examp…
• CVE-2009-1771index.php in Flyspeck CMS 6.8 does not require administrativ…
• CVE-2009-1772Cross-site scripting (XSS) vulnerability in activeCollab 2.1…
• CVE-2009-1773activeCollab 2.1 Corporate allows remote attackers to obtain…
• CVE-2009-1775Multiple cross-site scripting (XSS) vulnerabilities in Ulteo…
• CVE-2009-1776Multiple cross-site scripting (XSS) vulnerabilities in FormM…
• CVE-2009-1777CRLF injection vulnerability in FormMail.pl in Matt Wright F…
• CVE-2009-1778SQL injection vulnerability in the new user registration fea…
• CVE-2009-1779PHP remote file inclusion vulnerability in admin.php in Frax…
• CVE-2009-1780admin.php in Frax.dk Php Recommend 1.3 and earlier does not …