Vulnerability Details CVE-2008-6825
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the langChoice parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.633
EPSS Ranking 98.3%
CVSS Severity
CVSS v2 Score 6.8
References
- http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html
- http://osvdb.org/50421
- http://www.securityfocus.com/bid/30135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43686
- https://www.exploit-db.com/exploits/6026
- http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html
- http://osvdb.org/50421
- http://www.securityfocus.com/bid/30135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43686
- https://www.exploit-db.com/exploits/6026