Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2008-7178

Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.3%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2008-7178
  • Xoops » Uploader » Version: 1.1
    cpe:2.3:a:xoops:uploader:1.1
  • Xoops » Xoops » Version: 2.5.10
    cpe:2.3:a:xoops:xoops:2.5.10
  • Xoops » Xoops » Version: 2.5.6
    cpe:2.3:a:xoops:xoops:2.5.6
  • Xoops » Xoops » Version: 2.5.7
    cpe:2.3:a:xoops:xoops:2.5.7
  • Xoops » Xoops » Version: 2.5.7.2
    cpe:2.3:a:xoops:xoops:2.5.7.2
  • Xoops » Xoops » Version: 2.5.7.3
    cpe:2.3:a:xoops:xoops:2.5.7.3
  • Xoops » Xoops » Version: 2.5.8
    cpe:2.3:a:xoops:xoops:2.5.8
  • Xoops » Xoops » Version: 2.5.8.1
    cpe:2.3:a:xoops:xoops:2.5.8.1


Contact Us

Shodan ® - All rights reserved