Unscored severity · published Aug 19, 2008
CVE-2008-3710
Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cyboards Php Lite · Hotscripts
1.21 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3710
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3710
Exploit
http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt
www.attrition.org
http://www.attrition.org/pipermail/vim/2008-August/002052.html
www.securityfocus.com
http://www.securityfocus.com/bid/30688
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44475
More from Cyboards Php Lite
–
CVE-2008-3707
Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the script_path parameter to (1)…
–
CVE-2008-3709
Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2)…