Description

thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).

Remediation

References

CVE-2008-6592

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5336)

WordPress Plugin DB Backup Directory Traversal (4.5)

TYPO3 Improper Authentication Vulnerability (CVE-2009-3635)

WordPress Plugin Event Registration Multiple Vulnerabilities (6.02.03)

Oracle JRE Improper Certificate Validation Vulnerability (CVE-2003-1229)

Severity

High

Classification

CVE-2008-6592 CWE-22

Tags

Missing Update Known Vulnerabilities