CVE-2008-3365

2008-07-3017:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the language_full parameter.

References

secunia.com/advisories/31239

securityreason.com/securityalert/4062

www.pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch

www.securityfocus.com/archive/1/494817/100/0/threaded

www.securityfocus.com/bid/30397

www.vupen.com/english/advisories/2008/2207/references

exchange.xforce.ibmcloud.com/vulnerabilities/44031

www.exploit-db.com/exploits/6150