7.5
CVSSv2

CVE-2008-2782

Published: 19/06/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) library_rss.php and (2) rss.php.

Vulnerable Product Search on Vulmon Subscribe to Product

otomigenx otomigenx 2.2

Exploits

[+] Author: Saime [+] Script: OtomigenX v22 (lang) Local File Inclusion [+] URL: kmrgitbacid/otomigenx/?menu=download [+] Date: 28/05/2008 [+] Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot! [+] Site: h4ck-y0uorg [+] File: library_rssphp/rs ...