CVE-2008-6592

thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read…

published April 3, 2009

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02903 · 86.8th percentile
Published
2009-04-03T18:00Z
EPSS history
Timeline
  • 03 APR 18:00Z
    thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read…
    cvelistv5