PT-2008-1994 · Gradman · Gradman

Joss · Published 2008-01-18 · Updated 2018-10-15 · CVE-2008-0361

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GradMan versions 0.1.3 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter in the agregar info.php file.

Recommendations For GradMan versions 0.1.3 and earlier, avoid using the tabla parameter in the affected agregar info.php file until the issue is resolved. As a temporary workaround, consider restricting access to the agregar info.php file to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-0361

Affected Products

Gradman

References · 7

• 🔥 https://exploit-db.com/exploits/4926 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0361 · Security Note
• http://secunia.com/advisories/28520 · Vendor Advisory
• http://securityfocus.com/bid/27324 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39732 · Note
• http://securityfocus.com/archive/1/486444/100/0/threaded · Note
• http://securityreason.com/securityalert/3552 · Note