CVE-2008-4361

EPSS 3.0%

Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6604unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/32031 http://securityreason.com/securityalert/4340 https://exchange.xforce.ibmcloud.com/vulnerabilities/45491 https://www.exploit-db.com/exploits/6604 http://www.securityfocus.com/bid/31454