CVE-2008-6734

EPSS 3.0%

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/5940unverified cve_referencewww.exploit-db.com/exploits/5956unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43373 https://www.exploit-db.com/exploits/5940 https://www.exploit-db.com/exploits/5956 http://www.securityfocus.com/bid/29971