Description

Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Remediation

References

CVE-2008-3296

Related Vulnerabilities

WordPress Plugin Portfolio Gallery-Image Gallery Cross-Site Request Forgery (1.1.2)

Moodle CVE-2021-36402 Vulnerability (CVE-2021-36402)

WordPress 4.0.x PHP Object Injection (4.0 - 4.0.32)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20445)

Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528)

Severity

High

Classification

CVE-2008-3296 CWE-22

Tags

Missing Update Known Vulnerabilities