CVE-2009-0929: Nucleus Group Nucleus CMS

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors.

Affected products

• Nucleus Group Nucleus CMS: any version; up to and including 3.40; version 3.0 only; version 3.0_1 only; version 3.0_rc only; version 3.1 only; …

Published 2009-03-17. Last modified 2026-06-16.