CVE-2008-2459

  • Last update: Apr 13, 2023

Description

Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

Software From Fixed in
entertainmentscript / entertainmentscript 1.4.0 1.4.0.x

Details

    • Severity: Medium
  • CVE: CVE-2008-2459
  • Published: May 27, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10