CVE-2008-7240 Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template para...
HighCVSS 7.5
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linuxwebshop php user base | = 1.3-beta | No fix listed |
References
- 27964 exploit vdb-entry
- phpuserbase-unverified-file-include(40793) vdb-entry
- 5179 exploit