CVE-2009-1768: Ramazeiten RAMAZAITENCMS0.9.7.5

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

• Ramazeiten RAMAZAITENCMS0.9.7.5: any version
• Ramazeiten RAMAZAITENCMS0.9.7.6: any version
• Ramazeiten RAMAZAITENCMS0.9.7.8: any version
• Ramazeiten RAMAZAITENCMS0.9.8: any version

Published 2009-05-22. Last modified 2026-06-16.