VulnerabilityModified
CVE-2008-1755
Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
MEDIUM 5.0EPSS 2.67%
Does this matter?
Lower severity and a low EPSS score (2.67%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.67% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- zekewalker/world of phaos
- Source
- cve@mitre.org
References
- http://www.osvdb.org/44387
- http://www.securityfocus.com/bid/28719Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41741
- https://www.exploit-db.com/exploits/5420
- http://www.osvdb.org/44387
- http://www.securityfocus.com/bid/28719Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41741
- https://www.exploit-db.com/exploits/5420
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.