CVE-2008-6002 Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation paramet...
HighCVSS 7.1
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-cp | = 0.5.7 | No fix listed |
References
- 31979 third-party-advisory vendor-advisory
- 31371 exploit vdb-entry
- www.web-cp.net
- webcp-sendfile-information-disclosure(45408) vdb-entry
- 6556 exploit