CVE-2008-0822

CVE-2008-0822 affects Scribe 0.2: a directory traversal in index.php via the page parameter (".."), enabling read of arbitrary local files. Root cause is insufficient input validation. Impact is local confidentiality exposure (PARTIAL). CVSS v2 base score 3.6 (LOW) with LOCAL access and no authen...