CVE-2009-2180: PC4ARB PC4 Uploader

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter.

Affected products

• PC4ARB PC4 Uploader: version 10.0 only

Published 2009-06-23. Last modified 2026-06-16.