Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-09-08T10:00:00
Updated: 2024-08-07T11:56:14.435Z
Reserved: 2009-09-07T00:00:00
Link: CVE-2008-7178
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-09-08T10:30:01.640
Modified: 2017-09-29T01:33:33.277
Link: CVE-2008-7178
Redhat
No data.