CyberSec.Space Logo
Back to CVE Browser

CVE-2008-4499

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0500%
EPSS Percentile36.46th
PublishedOct 9, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to edit.php.

Affected Platforms (CPE)

📦
Php Web Explorer

Php Web Explorer Lite

<= 0.99b
📦
Php Web Explorer

Php Web Explorer Lite

= 0.99a

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=122332154511973&w=2
🔗 http://securityreason.com/securityalert/4371
🔗 http://www.securityfocus.com/bid/31595
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45691
🔗 http://marc.info/?l=bugtraq&m=122332154511973&w=2
🔗 http://securityreason.com/securityalert/4371
🔗 http://www.securityfocus.com/bid/31595
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45691

Related Vulnerabilities

CVE-2008-034510.0

Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, ak...

CVE-2008-082410.0

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

CVE-2008-034410.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote a...

CVE-2008-086010.0

Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vect...