CVE-2008-6734 Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
HighCVSS 9.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| keller web admin kwa | = 0.94 | No fix listed |
References
- 29971 exploit vdb-entry
- kellerwebadmin-index-file-include(43373) vdb-entry
- 5940 exploit
- 5956 exploit