CVE-2008-4319 | BDVDB-2026-32596 Detail

Description#

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/6567
http://www.securityfocus.com/bid/31415
http://www.securityfocus.com/archive/1/496742
https://exchange.xforce.ibmcloud.com/vulnerabilities/45423

Exploit#

https://www.exploit-db.com/exploits/6567

History#

Version 12008-09-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.