CVE-2008-3365
MEDIUM 6.8EPSS 3.8%
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 3.80% chance of exploitation in the next 30 days, 90th percentile
- Published
- 2008-07-30
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/31239
- http://www.pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch
- http://www.securityfocus.com/bid/30397