CVE-2008-6172

2009-02-1916:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.007

Percentile

81.0%

JSON

Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.