Skip to content

CVE-2008-6407 Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the framefile parameter.

HighCVSS 7.5 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known

Description

Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the framefile parameter.

Affected products

ProductAffected versionsFixed in
brian wilson olbookmarks = 0.7.5 No fix listed

References