CVE-2008-6265

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter.

Link	Resource
http://www.securityfocus.com/bid/32218	Exploit
http://www.vupen.com/english/advisories/2008/3070	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46490
https://www.exploit-db.com/exploits/7065

Configuration 1

cpe:2.3:a:cyberfolio:cyberfolio:1.0:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.2:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:6.0:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc1:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.1:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:*:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:7.10:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc3:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.0:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc2:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:7.12:*:*:*:*:*:*:* cpe:2.3:a:cyberfolio:cyberfolio:1.2:rc1:*:*:*:*:*:*

---

Published : 2009-02-24 06:30

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6265

Mitre link : CVE-2008-6265

No products.

CWE-22