CVE-2008-4358

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-09-30

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Spaw Php (Spaw Editor)

References

• http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/
• http://secunia.com/advisories/31796
• http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954
• http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359
• http://www.securityfocus.com/bid/31185
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45104