CVE-2008-6960 | BDVDB-2026-37829 Detail

Description#

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/7074
http://www.securityfocus.com/bid/32227
http://secunia.com/advisories/32537
http://www.vupen.com/english/advisories/2008/3062
https://exchange.xforce.ibmcloud.com/vulnerabilities/46489
http://osvdb.org/49797

Exploit#

https://www.exploit-db.com/exploits/7074

History#

Version 12009-08-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.