Directory Traversal Vulnerability in XOOPS by XOOPS Project
CVE-2008-3296

Currently unrated

Key Information:

Vendor

Xoops

Status
Xoops
Vendor
CVE Published:
25 July 2008

What is CVE-2008-3296?

A directory traversal vulnerability exists in the 'modules/system/admin.php' file of XOOPS version 2.0.18, allowing remote attackers to include and execute arbitrary local files by manipulating the 'fct' parameter with a '..' (dot dot) notation. This flaw can compromise system integrity by allowing unauthorized access to local files. It is critical to implement proper input validation and restriction mechanisms to mitigate this kind of threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43966
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/30330
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.