CVE-2008-0231 | BDVDB-2026-28654 Detail

Description#

Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/4876
http://www.securityfocus.com/bid/27196
https://exchange.xforce.ibmcloud.com/vulnerabilities/39555
http://www.securityfocus.com/archive/1/485991/100/0/threaded
http://securityreason.com/securityalert/3532

Exploit#

https://www.exploit-db.com/exploits/4876

History#

Version 12008-01-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.