medium5.0Public exploit code
CVE-2008-2215
Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities2008-04-30 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) src/yopy_sync.php and (2) system-logger/print_logs.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pbcs | Project-Based Calendaring System | Version 0.7.1-1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30015
- http://www.securityfocus.com/bid/28991
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42106
- https://www.exploit-db.com/exploits/5523
- http://secunia.com/advisories/30015
- http://www.securityfocus.com/bid/28991
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42106
- https://www.exploit-db.com/exploits/5523