CVE-2008-2352

2008-05-2010:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang cookie.

References

secunia.com/advisories/30138

www.securityfocus.com/archive/1/492227/100/0/threaded

www.securityfocus.com/bid/29264

www.vupen.com/english/advisories/2008/1563/references

exchange.xforce.ibmcloud.com/vulnerabilities/42498

www.exploit-db.com/exploits/5640