PT-2009-1658 · Php · My Php Indexer

Published 2009-02-19 · Updated 2017-09-29 · CVE-2008-6183

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions My PHP Indexer version 1.0

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities in the index.php file. This is achieved by using a .. (dot dot) in the d and f parameters.

Recommendations For My PHP Indexer version 1.0, consider restricting access to the index.php file until a patch is available, and avoid using the d and f parameters in a way that could facilitate directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-6183

Affected Products

My Php Indexer

References · 7

• 🔥 http://securityfocus.com/bid/31726 · Exploit
• 🔥 https://exploit-db.com/exploits/6740 · Exploit
• http://secunia.com/advisories/32215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6183 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45830 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6183 · Note
• http://vupen.com/english/advisories/2008/2796 · Note