CVE-2008-4894 Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows rem...
MediumCVSS 5.1
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the template_path parameter. NOTE: it was later reported that this issue also affects 5.0.12c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tribiq cms | = 5.0.10a | No fix listed |
References
- 32548 third-party-advisory vendor-advisory
- 32018 vdb-entry
- tribiq-headerinc-file-include(46264) vdb-entry
- 6888 exploit