CVE-2008-1565: Path Traversal
Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1565?
CVE-2008-1565 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.
How can CVE-2008-1565 be exploited?
CVE-2008-1565 can be exploited by sending specially crafted requests that include directory traversal sequences in the phpEx parameter.
What versions are affected by CVE-2008-1565?
CVE-2008-1565 affects PJIRC 0.5 and the phpBB PJIRC module version 0.5.
How do I fix CVE-2008-1565?
To fix CVE-2008-1565, it is recommended to update to a patched version of PJIRC and the phpBB PJIRC module that are not vulnerable.
Is there a mitigative action for CVE-2008-1565?
A potential mitigative action for CVE-2008-1565 is to implement web application firewalls to filter malicious requests containing directory traversal patterns.