CVE-2008-0742

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .

published February 13, 2008

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php. NOTE: vector 2 is only exploitable by administrators.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02286 · 82.9th percentile
Published
2008-02-13T01:00Z
EPSS history
Timeline
  • 13 FEB 01:00Z
    Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .
    cvelistv5