Skip to content

CVE-2008-4739 Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi....

MediumCVSS 6.8 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi parameter.

Affected products

ProductAffected versionsFixed in
plugspace = 0.1 No fix listed

References

  • 32033 exploit third-party-advisory
  • 4475 third-party-advisory
  • 31457 exploit vdb-entry
  • 6602 exploit