CVE-2008-6172 Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and exec...
MediumCVSS 6.8
EPSS 12.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| weberr rwcards | = 3.0.11 | No fix listed |
References
- 32367 third-party-advisory vendor-advisory
- 31892 exploit vdb-entry
- rwcards-captchaimage-file-include(46081) vdb-entry
- 6817 exploit