Skip to main content
← All vulnerabilities
CVE-2008-4758

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a ..

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot) in the fichier parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-6833

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 4

securityfocus.com

securityreason.com

exchange.xforce.ibmcloud.com

Exploit-DB