7.5
CVSSv2

CVE-2008-0488

Published: 30/01/2008 Updated: 15/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the location parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

vb marketing vb marketing

Exploits

source: wwwsecurityfocuscom/bid/27475/info VB Marketing is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input An attacker can exploit this vulnerability using directory-traversal strings to include local script code in the context of the application This may allow the attacker to acces ...