Back to CVE Browser

CVE-2008-2495

HIGH

7.5

CVSS Severity Score

EPSS Score0.1180%

EPSS Percentile12.68th

PublishedMay 28, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot) in the p parameter.

Affected Platforms (CPE)

📦

Pancake

Zina

= 1.0_rc3

References & Advisories

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42641

🔗 http://www.securityfocus.com/archive/1/492593/100/0/threaded

🔗 http://www.securityfocus.com/bid/29367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/42641

Related Vulnerabilities

CVE-2007-030310.0

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential secur...

CVE-2005-46317.5

SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via...

CVE-2008-24944.3

Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HT...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...