high7.5Public exploit code
CVE-2008-1512
Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB Module XS-Mod 2.3.1 - Local File Inclusion2008-03-24 · webapps · php · Verified
Impact
Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb | Module Xs | Versions 2.3.1, 2.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29487
- http://www.securityfocus.com/bid/28432
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41404
- https://www.exploit-db.com/exploits/5301
- http://secunia.com/advisories/29487
- http://www.securityfocus.com/bid/28432
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41404
- https://www.exploit-db.com/exploits/5301