CVE

Id
35326  
CVE No.
CVE-2008-5209  
Status
Candidate  
Description
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.  
Phase
Assigned (20081124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
387180 35326 CVE-2008-5209 MILW0RM:5575  View
387181 35326 CVE-2008-5209 URL:http://www.milw0rm.com/exploits/5575  View
387182 35326 CVE-2008-5209 BID:29127  View
387183 35326 CVE-2008-5209 URL:http://www.securityfocus.com/bid/29127  View
387184 35326 CVE-2008-5209 SREASON:4625  View
387185 35326 CVE-2008-5209 URL:http://securityreason.com/securityalert/4625  View
387186 35326 CVE-2008-5209 XF:admidio-getfile-file-include(42304)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48367 JVNDB-2008-003677 AJ Article の featured_article.php における SQL インジェクションの脆弱性 AJ Article の featured_article.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5213 35326 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003677.html  View