5
CVSSv2

CVE-2008-2342

Published: 19/05/2008 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote malicious users to read arbitrary files via a .. (dot dot) in the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

news manager news manager 2.0

Exploits

News Manager 20 Multiple Vulnerabilities Script : superb-eastdlsourceforgenet/sourceforge/newsrssmanager/newsmanager20zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /ch_readalsophp?read_xml_include=localhost/020txt 2- Remote File Disclosure Vulnerability /attachments ...