CVE-2008-2459 Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
MediumCVSS 6.8
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entertainmentscript | = 1.4.0 | No fix listed |
References
- 30311 third-party-advisory vendor-advisory
- 29306 vdb-entry
- entertainmentscript-page-file-include(42540) vdb-entry
- 5655 exploit