CVE-2008-3128 Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivot | = 1.40.5 | No fix listed |
References
- forum.pivotlog.net
- pivot-weblog.svn.sourceforge.net patch
- 30889 exploit third-party-advisory vendor-advisory
- 30012 exploit patch vdb-entry
- 1020412 vdb-entry
- ADV-2008-1991 vdb-entry
- pivot-search-directory-traversal(43470) vdb-entry
- 5973 exploit