PT-2008-4774 · Talkback · Talkback

Sirgod · Published 2008-07-30 · Updated 2017-09-29 · CVE-2008-3371

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TalkBack versions prior to 2.3.6.2

Description A directory traversal issue in the install/help.php file allows remote attackers to include and execute arbitrary local files by using directory traversal sequences in the language parameter.

Recommendations For versions prior to 2.3.6.2, update to version 2.3.6.2 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-3371

Affected Products

Talkback

References · 10

• 🔥 https://exploit-db.com/exploits/6148 · Exploit
• 🔥 https://exploit-db.com/exploits/9095 · Exploit
• 🔥 http://securityfocus.com/bid/30393 · Exploit
• 🔥 https://exploit-db.com/exploits/6451 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3371 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44018 · Note
• http://securityreason.com/securityalert/4067 · Note
• http://packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt · Note
• http://scripts.oldguy.us/talkback/release-notes.html · Note
• http://vupen.com/english/advisories/2008/2211/references · Note