CVE-2008-4602

2008-10-1722:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.012

Percentile

85.3%

JSON

Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a … (dot dot) in the md parameter.

References

securityreason.com/securityalert/4432

www.securityfocus.com/bid/31796

exchange.xforce.ibmcloud.com/vulnerabilities/46060

www.exploit-db.com/exploits/6772