CVE-2008-3405

2008-07-3116:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.031

Percentile

91.1%

JSON

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action_file parameter.

References

secunia.com/advisories/31297

securityreason.com/securityalert/4086

www.securityfocus.com/bid/30439

exchange.xforce.ibmcloud.com/vulnerabilities/44065

www.exploit-db.com/exploits/6164