CVE-2008-6786 Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1) handle_edit and (2) handle_raw functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codewiz geekigeeki | = 2.0 | No fix listed |
References
- 33162 third-party-advisory vendor-advisory
- www.codewiz.org exploit
- www.codewiz.org
- 50719 patch vdb-entry
- 32831 patch vdb-entry
- geekigeeki-handleedit-directory-traversal(47375) vdb-entry