CVE-2008-3723

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.htmlExploit
• http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txtExploit
• http://secunia.com/advisories/31533Vendor Advisory
• http://www.securityfocus.com/bid/30707Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44509
• http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.htmlExploit
• http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txtExploit
• http://secunia.com/advisories/31533Vendor Advisory
• http://www.securityfocus.com/bid/30707Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44509

Published

Aug 20, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3717Harmoni before 1.6.0 does not require administrative privile…
• CVE-2008-3718Multiple SQL injection vulnerabilities in cyberBB 0.6 allow …
• CVE-2008-3719SQL injection vulnerability in directory.php in SFS Affiliat…
• CVE-2008-3720SQL injection vulnerability in index.php in DeeEmm CMS (DMCM…
• CVE-2008-3721PHP remote file inclusion vulnerability in user_language.php…
• CVE-2008-3722SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 …
• CVE-2008-3724SQL injection vulnerability in index.php in Papoo before 3.7…
• CVE-2008-3725SQL injection vulnerability in trr.php in YourFreeWorld Ad B…
• CVE-2008-3726Cross-site scripting (XSS) vulnerability in Web Based Admini…
• CVE-2008-3727Directory traversal vulnerability in Web Based Administratio…
• CVE-2008-3728Web Based Administration in MicroWorld Technologies MailScan…
• CVE-2008-3729Web Based Administration in MicroWorld Technologies MailScan…