4 matches found
CVE-2008-6453
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
4.3CVSS6.6AI score0.02287EPSS
SaveExploits1References4
CVE-2008-6453
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
6.6AI score0.02287EPSS
SaveExploits1References4
CVE-2008-6453
CVE-2008-6453 affects 6rbScript 3.3. A directory traversal flaw in section.php can be exploited when magic_quotes_gpc is disabled to read arbitrary files by supplying a double-dot (.. ) in the name parameter. The NVD entry notes a remote-access vector with MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N...
4.3CVSS6.8AI score0.02287EPSS
SaveExploits1References4Affected Software1
20