medium5.0Public exploit code
CVE-2008-1782
phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ChartDirector 4.1 - 'viewsource.php' File Disclosure2008-04-07 · webapps · php · Verified
Impact
phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advanced Software Engineering | Chartdirector | Version 4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/28674
- http://www.vupen.com/english/advisories/2008/1140/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41701
- https://www.exploit-db.com/exploits/5399
- http://www.securityfocus.com/bid/28674
- http://www.vupen.com/english/advisories/2008/1140/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41701
- https://www.exploit-db.com/exploits/5399