CVE-2008-6012

2009-01-3018:03:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.4%

JSON

Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the filename parameter in a viewEntry action.

References

secunia.com/advisories/31915

www.securityfocus.com/bid/31503

exchange.xforce.ibmcloud.com/vulnerabilities/45551

www.exploit-db.com/exploits/6639