CVE-2008-4358 Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| spaw editor spaw php | <= 2.0.8 | No fix listed |
| spaw editor spaw php | = 1.0 | No fix listed |
| spaw editor spaw php | = 1.0-rc1 | No fix listed |
| spaw editor spaw php | = 1.0-rc2 | No fix listed |
| spaw editor spaw php | = 1.0.1 | No fix listed |
| spaw editor spaw php | = 1.0.2 | No fix listed |
| spaw editor spaw php | = 1.0.3 | No fix listed |
| spaw editor spaw php | = 1.0.4 | No fix listed |
| spaw editor spaw php | = 1.0.5 | No fix listed |
| spaw editor spaw php | = 1.0.5a | No fix listed |
| spaw editor spaw php | = 1.0.6 | No fix listed |
| spaw editor spaw php | = 1.0.7 | No fix listed |
| spaw editor spaw php | = 1.1 | No fix listed |
| spaw editor spaw php | = 1.1-beta | No fix listed |
| spaw editor spaw php | = 1.1-rc1 | No fix listed |
| spaw editor spaw php | = 1.2 | No fix listed |
| spaw editor spaw php | = 1.2-beta | No fix listed |
| spaw editor spaw php | = 1.2-beta_2 | No fix listed |
| spaw editor spaw php | = 1.2.1 | No fix listed |
| spaw editor spaw php | = 1.2.2 | No fix listed |
| spaw editor spaw php | = 1.2.3 | No fix listed |
| spaw editor spaw php | = 2.0.0 | No fix listed |
| spaw editor spaw php | = 2.0.0-beta | No fix listed |
| spaw editor spaw php | = 2.0.0-rc | No fix listed |
| spaw editor spaw php | = 2.0.1 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| spaw editor spaw php | = 2.0.2 | No fix listed |
| spaw editor spaw php | = 2.0.3 | No fix listed |
| spaw editor spaw php | = 2.0.4 | No fix listed |
| spaw editor spaw php | = 2.0.4.1 | No fix listed |
| spaw editor spaw php | = 2.0.5-beta | No fix listed |
| spaw editor spaw php | = 2.0.6 | No fix listed |
| spaw editor spaw php | = 2.0.7 | No fix listed |
References
- blog.solmetra.com patch
- 31796 third-party-advisory vendor-advisory
- sourceforge.net patch
- spaw.svn.sourceforge.net
- 31185 vdb-entry
- spaweditor-themeclass-unspecified(45104) vdb-entry