CVE-2008-4319

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files…

published September 29, 2008

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02304 · 83.1th percentile
Published
2008-09-29T18:00Z
EPSS history
Timeline
  • 29 SEP 18:00Z
    fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files…
    cvelistv5