Lucene search
PRIOn knowledge basePRION:CVE-2008-6592HistoryApr 03, 2009 - 6:30 p.m.
Directory traversal
2009-04-0318:30:00
PRIOn knowledge base
www.prio-n.com
2
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy “no database” (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).
| CPE | Name | Operator | Version |
|---|---|---|---|
| lightneasy | eq | 1.2.2 no-database | |
| sqlite | eq | 1.2.2 |
Related
cve
cve
CVE-2008-6592
2009-04-03 18:30:00
cvelist
cvelist
CVE-2008-6592
2009-04-03 18:00:00
nvd
nvd
CVE-2008-6592
2009-04-03 18:30:00