CVE-2008-3150
Last modified
CVE-2008-3150 is a vulnerability of currently unknown severity. Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.. EPSS estimates a 6.27% chance of exploitation in the next 30 days.
Description
Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Neutrino-Cms | Atomic Edition | 0.8.4 |
References
- http://secunia.com/advisories/30950Vendor Advisory
- http://secunia.com/advisories/30950Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3150?
How severe is CVE-2008-3150?
How do I fix CVE-2008-3150?
Are you affected by CVE-2008-3150?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
