CVE-2008-5989

2009-01-2815:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the l parameter.

References

secunia.com/advisories/31993

www.securityfocus.com/bid/31373

exchange.xforce.ibmcloud.com/vulnerabilities/45378

www.exploit-db.com/exploits/6553