CVE-2008-1908

EPSS 2.8%

Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or (2) the action parameter to category.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5437unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugreport.ir/index.php?/34 http://secunia.com/advisories/29807 https://exchange.xforce.ibmcloud.com/vulnerabilities/41783 https://www.exploit-db.com/exploits/5437 http://www.securityfocus.com/bid/28755 http://www.vupen.com/english/advisories/2008/1213/references