CVE-2008-6960

Published: 12/08/2009 Updated: 29/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 up to and including 1.6 allows remote malicious users to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x10media x10 automatic mp3 script 1.5.5
x10media x10 automatic mp3 script 1.6

################# ~THUNDER ################################################################ ~X10media Mp3 Search Engine v155 - 16 Remote File Disclosure Vulnerability ~Founded by : THUNDER <t4h[at]hotmailfr> ~Dork: "This search engine is in no way intended for illegal downloads " ~File : Downloadphp ================= ...

CWE-264 http://www.vupen.com/english/advisories/2008/3062 http://secunia.com/advisories/32537 http://www.securityfocus.com/bid/32227 http://osvdb.org/49797 https://exchange.xforce.ibmcloud.com/vulnerabilities/46489 https://www.exploit-db.com/exploits/7074 https://nvd.nist.gov https://www.exploit-db.com/exploits/7074/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6960

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect