返回 CVE 瀏覽器

CVE-2008-4592

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0490%

EPSS Percentile26.72th

Published2008年10月16日

Last Modified2026年4月23日

Vulnerability Description

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.

Affected Platforms (CPE)

📦

Sportspanel

Sports Clubs Web Portal

= 0.0.1

References & Advisories

🔗 http://securityreason.com/securityalert/4423

🔗 http://www.vupen.com/english/advisories/2008/2550

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45062

🔗 https://www.exploit-db.com/exploits/6427

🔗 http://securityreason.com/securityalert/4423

🔗 http://www.vupen.com/english/advisories/2008/2550

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45062

🔗 https://www.exploit-db.com/exploits/6427

相關漏洞威脅

CVE-2008-009810.0

Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE...

CVE-2008-501710.0

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, ...

CVE-2008-292810.0

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote att...

CVE-2008-000310.0

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus),...