CVE-2009-4512: Indymedia Oscailt

Medium severity, CVSS 5.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj_id parameter.

Affected products

• Indymedia Oscailt: version 3.3 only

Published 2009-12-31. Last modified 2026-06-16.