Directory traversal

2008-08-2016:41:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a … (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
phpizabieq0.848b c1-hfp3

CPE	Name	Operator	Version
	phpizabi	eq	0.848b c1-hfp3

References

packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt

secunia.com/advisories/31533

www.securityfocus.com/bid/30707

exchange.xforce.ibmcloud.com/vulnerabilities/44509

lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html