CVE-2008-3296: Path Traversal
Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3296?
CVE-2008-3296 has been classified with a high severity due to its potential to allow remote code execution.
How do I fix CVE-2008-3296?
To fix CVE-2008-3296, you should update to the latest version of XOOPS that addresses this vulnerability.
What systems are affected by CVE-2008-3296?
CVE-2008-3296 specifically affects XOOPS version 2.0.18.1.
What kind of attack is possible with CVE-2008-3296?
An attacker can exploit CVE-2008-3296 to perform directory traversal, allowing them to include and execute arbitrary local files on the server.
Can CVE-2008-3296 be exploited remotely?
Yes, CVE-2008-3296 can be exploited remotely by attackers who send crafted requests to the vulnerable XOOPS installation.