6.8
CVSSv2

CVE-2008-3446

Published: 04/08/2008 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

letterit letterit 2

Exploits

==================================================================== [o] LetterIt 2 Local File Inclusion Vulnerability Software : LetterIt Newsletter Manager version 2 Vendor : wwwletteritde/ Author : NoGe Contact : noge[dot]code[at]gmail[dot]com ====================================================== ...