CVE-2008-7240

EUVD-2008-7198 · Published Sep 17, 2009

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.

Technologies

Linuxwebshop Php User Base

Weaknesses

CWE-22CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://www.securityfocus.com/bid/27964
https://www.exploit-db.com/exploits/5179
https://exchange.xforce.ibmcloud.com/vulnerabilities/40793

Potentially impacted assets

See if this affects your attack surface