CVE-2008-0819

2008-02-1920:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the page parameter.

References

securityreason.com/securityalert/3667

www.securityfocus.com/archive/1/488141/100/0/threaded

www.securityfocus.com/bid/27802