PT-2008-4596 · Web 2 Business · Phpdatingclub

Big Ben · Published 2008-07-15 · Updated 2017-09-29 · CVE-2008-3179

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Web 2 Business (W2B) phpDatingClub (aka Dating Club) version 3.7

Description: A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the page parameter of the website.php file.

Recommendations: For version 3.7, consider restricting access to the website.php file until a patch is available, or apply configuration changes to prevent directory traversal attacks, such as validating and sanitizing the page parameter to prevent the use of .. (dot dot) sequences.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-3179

Affected Products

Phpdatingclub

References · 7

• 🔥 https://exploit-db.com/exploits/6037 · Exploit
• 🔥 http://securityfocus.com/bid/30176 · Exploit
• http://secunia.com/advisories/31040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3179 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43710 · Note
• http://vupen.com/english/advisories/2008/2060/references · Note
• http://securityreason.com/securityalert/3992 · Note