6.8
CVSSv2

CVE-2008-5265

Published: 28/11/2008 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the modulo parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

tntforum tnt forum 0.9.4

Exploits

====================================================== TNT Forum 094 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| `--------' | O CWH Underground Hacking Team `+---------------------------^----------| `\_,-------, _ ...