CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2008-6167

Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lng parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 77.5%

CVSS Severity

CVSS v2 Score 7.5

References

http://www.securityfocus.com/bid/31895
https://exchange.xforce.ibmcloud.com/vulnerabilities/46079
https://www.exploit-db.com/exploits/6821
http://www.securityfocus.com/bid/31895
https://exchange.xforce.ibmcloud.com/vulnerabilities/46079
https://www.exploit-db.com/exploits/6821

Products affected by CVE-2008-6167

Miniportail » Miniportail » Version: 1.9

cpe:2.3:a:miniportail:miniportail:1.9
Miniportail » Miniportail » Version: 2.0

cpe:2.3:a:miniportail:miniportail:2.0
Miniportail » Miniportail » Version: 2.1

cpe:2.3:a:miniportail:miniportail:2.1
Miniportail » Miniportail » Version: 2.2

cpe:2.3:a:miniportail:miniportail:2.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6167

Products

Pricing

Contact Us