CVE-2008-5943
published 2009-01-22CVE-2008-5943: Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in…
PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.56%
83.2th percentile
Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to (1) admin_modules.php and (2) modules.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| navboard | navboard | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion
exploitdb·2008-08-13
CVE-2008-5943 Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion
Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion
---
source: https://www.securityfocus.com/bid/30687/info
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Navboard 16 is vulner
Exploit-DB
Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
exploitdb·2008-08-13
CVE-2008-5943 Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
---
source: https://www.securityfocus.com/bid/30687/info
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Navboard 16 is vulnerable;
No writeups or analysis indexed.
http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txthttp://secunia.com/advisories/31463http://www.securityfocus.com/bid/30687https://exchange.xforce.ibmcloud.com/vulnerabilities/44450http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txthttp://secunia.com/advisories/31463http://www.securityfocus.com/bid/30687https://exchange.xforce.ibmcloud.com/vulnerabilities/44450
2009-01-22
Published