CVE-2008-4780

2008-10-2914:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.016

Percentile

87.6%

JSON

Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter.

References

securityreason.com/securityalert/4522

www.securityfocus.com/bid/31934

www.vupen.com/english/advisories/2008/2938

exchange.xforce.ibmcloud.com/vulnerabilities/46155

www.exploit-db.com/exploits/6846