CVE-2008-1371

Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full…

published March 18, 2008

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full pathname in the d_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01698 · 77.0th percentile
Published
2008-03-18T17:00Z
EPSS history
Timeline
  • 18 MAR 17:00Z
    Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full…
    cvelistv5