CVE-2008-3128

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.

• CWE-22

• http://forum.pivotlog.net/viewtopic.php?t=12471
• http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog/branches/1.40.x/pivot/modules/module_parser.php?r1=1333&r2=1332&pathrev=1333Patch
• http://secunia.com/advisories/30889Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/30012Exploit, Patch
• http://www.securitytracker.com/id?1020412
• http://www.vupen.com/english/advisories/2008/1991/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43470
• https://www.exploit-db.com/exploits/5973
• http://forum.pivotlog.net/viewtopic.php?t=12471
• http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog/branches/1.40.x/pivot/modules/module_parser.php?r1=1333&r2=1332&pathrev=1333Patch
• http://secunia.com/advisories/30889Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/30012Exploit, Patch
• http://www.securitytracker.com/id?1020412
• http://www.vupen.com/english/advisories/2008/1991/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43470
• https://www.exploit-db.com/exploits/5973

Published

Jul 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3122Multiple SQL injection vulnerabilities in Xerox CentreWare W…
• CVE-2008-3123SQL injection vulnerability in index.php in Mole Group Real …
• CVE-2008-3124SQL injection vulnerability in index.php in Mole Group Hotel…
• CVE-2008-3125SQL injection vulnerability in index.php in Mole Group Lastm…
• CVE-2008-3126Multiple stack-based buffer overflows in the ServerView web …
• CVE-2008-3127PHP remote file inclusion vulnerability in hioxBannerRotate.…
• CVE-2008-3129Multiple SQL injection vulnerabilities in index.php in Catvi…
• CVE-2008-3130Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2008-3131SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alp…
• CVE-2008-3132SQL injection vulnerability in the beamospetition (com_beamo…
• CVE-2008-3133SQL injection vulnerability in admin/index.php in BareNuked …
• CVE-2008-3134Multiple unspecified vulnerabilities in GraphicsMagick befor…