CVE-2008-1651

2008-04-0217:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.012

Percentile

85.1%

JSON

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang parameter.

References

secunia.com/advisories/29624

securityreason.com/securityalert/3793

www.securityfocus.com/archive/1/490338/100/0/threaded

www.securityfocus.com/bid/28542

exchange.xforce.ibmcloud.com/vulnerabilities/41589

www.exploit-db.com/exploits/5333