medium5.0Public exploit code
CVE-2008-5936
front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mini-pub 0.3 - Local Directory Traversal / File Disclosure2008-10-12 · webapps · php · Verified
Impact
front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mini-Pub | Mini-Pub | through 0.3 Versions 0.1, 0.1.1, 0.1.2 |