Vulnerability Details CVE-2008-2913
Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the currentpath parameter, in conjunction with certain ... (triple dot) and ..... sequences in the currentfile parameter, to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.3%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/30585
- http://www.securityfocus.com/bid/29728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43116
- https://www.exploit-db.com/exploits/5822
- http://secunia.com/advisories/30585
- http://www.securityfocus.com/bid/29728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43116
- https://www.exploit-db.com/exploits/5822