CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter…

published August 12, 2009

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06968 · 94.1th percentile
Published
2009-08-12T10:00Z
EPSS history
Timeline
  • 12 AUG 10:00Z
    download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter…
    cvelistv5