CVE-2008-6172

Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled…

published February 19, 2009

CVSS

—

EPSS

12%

Percentile

96.2

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.12284 · 96.2th percentile
Published: 2009-02-19T16:00Z

EPSS history

Timeline

19 FEB 16:00Z
Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled…
cvelistv5