medium5.1Public exploit code
CVE-2008-4894
Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tribiq CMS 5.0.10a (Windows) - Local File Inclusion2008-10-31 · webapps · php · Verified
Impact
Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the template_path parameter. NOTE: it was later reported that this issue also affects 5.0.12c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tribiq | Tribiq Cms | Version 5.0.10a |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32548
- http://www.securityfocus.com/bid/32018
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46264
- https://www.exploit-db.com/exploits/6888
- http://secunia.com/advisories/32548
- http://www.securityfocus.com/bid/32018
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46264
- https://www.exploit-db.com/exploits/6888