CVE-2008-5962

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the objectname parameter.

Link	Resource
http://www.securityfocus.com/bid/32646	Exploit
http://secunia.com/advisories/32982	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47090
https://www.exploit-db.com/exploits/7344

Configuration 1

cpe:2.3:a:gravity-gtd:gravity-gtd:0.2:beta:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:0.3:*:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:0.4:*:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:*:*:*:*:*:*:*:*

---

Published : 2009-01-23 07:00

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5962

Mitre link : CVE-2008-5962

No products.

CWE-22