CVE-2008-0140
Uebimiau Webmail 2.7.10 and 2.7.2 - Authenticated Path Traversal via Selected Theme Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0140. PoCs published by Eugene Minaev.
AI-analyzed exploit summary This exploit leverages a combination of register_globals being enabled and insecure use of extract() on $_GET to bypass authentication and read arbitrary local files on the server. The PoC demonstrates how to manipulate the selected_theme parameter to traverse directories and read files.
Description
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the selected_theme parameter, a different vector than CVE-2007-3172.
Exploits (1)
This exploit leverages a combination of register_globals being enabled and insecure use of extract() on $_GET to bypass authentication and read arbitrary local files on the server. The PoC demonstrates how to manipulate the selected_theme parameter to traverse directories and read files.