CVE-2009-1846: Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to...

Security readout for executives and security teams

SiteX 0.7.4 Build 418 and earlier allowed a remote attacker to make theme pages include local files by manipulating the THEME_FOLDER parameter. If an organization still runs this legacy CMS, the issue could expose sensitive files or execute included local PHP content. Exposure is likely limited to internet-accessible SiteX installations at version 0.7.4 Build 418 or earlier, especially default theme routes. This is a legacy 2009 issue, so modern exposure should be rare but high-risk where present. Treat confirmed exposure as urgent because the weakness is remotely reachable and publicly documented. Priority drops only if asset inventory confirms SiteX is absent or inaccessible. Mitigation focus: Identify and remove unsupported SiteX installations where possible.; If SiteX must remain, check vendor or archival guidance for fixed versions.; Restrict public access to affected theme homepage.php routes..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.