CVE-2008-3710 Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path para...
MediumCVSS 5.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hotscripts cyboards php lite | = 1.21 | No fix listed |
References
- packetstormsecurity.org exploit
- 20080819 CyBoards PHP uncertainties (RFI/path traversal) mailing-list
- 30688 vdb-entry
- cyboardsphplite-multiple-file-include(44475) vdb-entry