28504Third-party advisory
http://secunia.com/advisories/28504 CVE-2008-0357
Mini File Host 1.2 - 'language' Local File Inclusion
Record summary
CVE-2008-0357 has a selected CVSS score of 4.3; EIP currently links 2 catalogued exploits.
Description
Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBMini File Host 1.2 - 'language' Local File InclusionExploitDB exploitby Scary-BoysNot analyzed1 file
ExploitDBMini File Host 1.2.1 - 'language' Local File InclusionExploitDB exploitby shinmaiNot analyzed1 file
References
527327vdb entry
http://www.securityfocus.com/bid/27327 minifilehost-uploadphp-file-include(39799)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39799 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-0357 4930exploit
https://www.exploit-db.com/exploits/4930