7.5
CVSSv2

CVE-2008-4522

Published: 09/10/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the src parameter to (1) listen.php and (2) download.php.

Vulnerable Product Search on Vulmon Subscribe to Product

jesse-web jmweb mp3 music audio search and download script

Exploits

################################################################################################# [+] JMweb MP3 (src) Multiple Local File Inclusion [+] Discovered By SirGod [+] wWwMorTal-TeaMOrG [+] Greetz : EMINEM,Ras,Puscas_marin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex ####################################################### ...