CVE-2008-3446

2008-08-0417:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.031

Percentile

91.1%

JSON

Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the language parameter.

References

secunia.com/advisories/31298

securityreason.com/securityalert/4101

www.securityfocus.com/bid/30482

exchange.xforce.ibmcloud.com/vulnerabilities/44129

www.exploit-db.com/exploits/6179