CVE-2009-4415

CVE-2009-4415 describes multiple directory traversal vulnerabilities in phpGroupWare versions prior to 0.9.16.014. These flaws allow remote attackers to read arbitrary files or include and execute local files, primarily through manipulated parameters in addressbook components. With a CVSS score of 7.5, this vulnerability is considered high severity, requiring no authentication and low attack complexity to achieve partial confidentiality, integrity, and availability impacts. Despite its age and severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.