CVE-2008-6308
published 2009-02-27CVE-2008-6308: Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include and execute…
PriorityP333medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EXPLOIT
EPSS
2.04%
78.8th percentile
Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the pun_user[language] parameter to (1) functions_navlinks.php, (2) header_new_messages.php, (3) profile_send.php, and (4) viewtopic_PM-link.php in include/pms/.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| punbb | private_messaging_system | <= 1.2.3 | — |
| punbb | private_messaging_system | — | — |
| punbb | private_messaging_system | — | — |
| punbb | private_messaging_system | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/13201http://www.securityfocus.com/bid/32360http://www.vupen.com/english/advisories/2008/3214https://exchange.xforce.ibmcloud.com/vulnerabilities/46718https://www.exploit-db.com/exploits/7159http://secunia.com/advisories/13201http://www.securityfocus.com/bid/32360http://www.vupen.com/english/advisories/2008/3214https://exchange.xforce.ibmcloud.com/vulnerabilities/46718https://www.exploit-db.com/exploits/7159
2009-02-27
Published