CVE-2009-2325

CVE-2009-2325 describes a directory traversal vulnerability in Clicknet CMS 2.1's index.php, allowing remote attackers to read arbitrary files by manipulating the "side" parameter. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has low attack complexity, potentially leading to unauthorized information disclosure. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.