CVE-2008-1534: Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in…

PriorityP339high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

3.00%

85.7th percentile

Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) settings[footer] parameter to footer.inc.php and the (2) settings[header] parameter to header.inc.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
powerscripts	powerphpboard	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion

suricata·2010-07-30·CVSS 7.5

CVE-2008-1534 [HIGH] ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS PowerPHPBoard header.inc.php settings Parameter Local File Inclusion"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/header.inc.php?"; fast_pattern; nocase; content:"settings[header]="; nocase; http.uri.raw; url_decode; content:"|2e 2e 2f|"; reference:url,milw0rm.com/exploits/5303; reference:url,juniper.net/security/auto/vulnerabilities/vuln28421.html; reference:bugtraq,28421; reference:cve,CVE-2008-1534; classtype:web-application-attack; sid:2009660; rev:8; metadata:affected_product Web_Server_Applications, attack_target Server, created_at 2010_07_30, deployment Perimeter, deployment Inte

Suricata

ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion

suricata·2010-07-30·CVSS 7.5

CVE-2008-1534 [HIGH] ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS PowerPHPBoard footer.inc.php settings Parameter Local File Inclusion"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/footer.inc.php?"; nocase; content:"settings[footer]="; fast_pattern; nocase; http.uri.raw; url_decode; content:"|2e 2e 2f|"; reference:url,milw0rm.com/exploits/5303; reference:url,juniper.net/security/auto/vulnerabilities/vuln28421.html; reference:bugtraq,28421; reference:cve,CVE-2008-1534; classtype:web-application-attack; sid:2009659; rev:8; metadata:affected_product Web_Server_Applications, attack_target Server, created_at 2010_07_30, deployment Perimeter, deployment Inte