CVE-2008-3405

  • Last update: Apr 13, 2023

Description

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action_file parameter.

Software From Fixed in
nazgulled / nzfotolog 0.4.1 0.4.1.x

Details

    • Severity: Medium
  • CVE: CVE-2008-3405
  • Published: Jul 31, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10