SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a ..

MEDIUM 5.0EPSS 2.67%

Does this matter?

Lower severity and a low EPSS score (2.67%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. (dot dot) in the list parameter.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
2.67% probability · 85th percentile
CISA KEV
Not listed
Weakness
CWE-22
Affected
minigal/minigal
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.