CVE-2008-6002

EPSS 2.2%

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6556unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31979 https://exchange.xforce.ibmcloud.com/vulnerabilities/45408 https://www.exploit-db.com/exploits/6556 http://www.securityfocus.com/bid/31371 http://www.web-cp.net/mantis/changelog_page.php