CVE-2008-5171

Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) DB, (2) lang, and (3) skin parameters.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-11-19

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Phpblaster Cms (Phpblaster)

References

• http://www.securityfocus.com/bid/29983
• https://www.exploit-db.com/exploits/5952