CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) character to the URI.

• CWE-200

• http://freetexthost.com/eiyfyt0km5Exploit, URL Repurposed
• http://packetstormsecurity.org/0910-exploits/httpdx-disclose.txtExploit
• http://pocoftheday.blogspot.com/2009/10/httpdx-144-remote-arbitrary-source.htmlExploit
• http://secunia.com/advisories/37013Vendor Advisory
• http://www.osvdb.org/58857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53733
• http://freetexthost.com/eiyfyt0km5Exploit, URL Repurposed
• http://packetstormsecurity.org/0910-exploits/httpdx-disclose.txtExploit
• http://pocoftheday.blogspot.com/2009/10/httpdx-144-remote-arbitrary-source.htmlExploit
• http://secunia.com/advisories/37013Vendor Advisory
• http://www.osvdb.org/58857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53733

Published

Dec 31, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4525Cross-site scripting (XSS) vulnerability in the Print (aka P…
• CVE-2009-4526The Send by e-mail sub-module in the Print (aka Printer, e-m…
• CVE-2009-4527The Shibboleth authentication module 5.x before 5.x-3.4 and …
• CVE-2009-4528The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0…
• CVE-2009-4529InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows …
• CVE-2009-4530Mongoose 2.8.0 and earlier allows remote attackers to obtain…
• CVE-2009-4532Cross-site scripting (XSS) vulnerability in the Webform modu…
• CVE-2009-4533The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8…
• CVE-2009-4534Open redirect vulnerability in the FAQ Ask module 5.x and 6.…
• CVE-2009-4535Mongoose 2.8.0 and earlier allows remote attackers to obtain…
• CVE-2009-4536drivers/net/e1000/e1000_main.c in the e1000 driver in the Li…
• CVE-2009-4537drivers/net/r8169.c in the r8169 driver in the Linux kernel …