CVE-2008-6884

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local…

published July 31, 2009

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter to (1) blocks.php and (2) main.php in xoops_lib/modules/protector/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05615 · 92.9th percentile
Published
2009-07-31T20:00Z
EPSS history
Timeline
  • 31 JUL 20:00Z
    Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local…
    cvelistv5