Unscored severity · published Feb 20, 2009
CVE-2008-6201
Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KW
Kwsphp · Kwsphp
1.3.456 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6201
koogar.alorys-hebergement.com
http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49
Vendor Advisory
http://secunia.com/advisories/29802
www.securityfocus.com
http://www.securityfocus.com/archive/1/490861
www.securityfocus.com
http://www.securityfocus.com/bid/28788
www.vupen.com
http://www.vupen.com/english/advisories/2008/1241/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41950
More from Kwsphp
–
CVE-2008-1757
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW…
–
CVE-2008-1758
SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php
–
CVE-2008-1759
SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector…
–
CVE-2007-5485
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter
–
CVE-2007-4979
SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a…