CVE-2008-5579

2008-12-1517:45:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.

References

securityreason.com/securityalert/4733

www.securityfocus.com/archive/1/487695/100/200/threaded

www.securityfocus.com/bid/27671

www.exploit-db.com/exploits/6733