Description

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Remediation

References

CVE-2008-0612

Related Vulnerabilities

Oracle Database Server CVE-2013-3789 Vulnerability (CVE-2013-3789)

PHP CVE-2012-2688 Vulnerability (CVE-2012-2688)

WordPress Plugin Essential Addons for Elementor Security Bypass (5.7.1)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Security Bypass (1.3.75)

WordPress Plugin WP-PostRatings '[ratings]' Shortcode SQL Injection (1.61)

Severity

High

Classification

CVE-2008-0612 CWE-22

Tags

Missing Update Known Vulnerabilities