sourceforge.netConfirmation
http://sourceforge.net/forum/forum.php?forum_id=834373 CVE-2008-2782
OtomiGen.x 2.2 - 'lang' Local File Inclusion
Record summary
CVE-2008-2782 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) library_rss.php and (2) rss.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOtomiGen.x 2.2 - 'lang' Local File InclusionExploitDB exploitby SaimeNot analyzed1 file
References
5ADV-2008-1678vdb entry
http://www.vupen.com/english/advisories/2008/1678/references otomigenx-lang-file-include(42665)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42665 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-2782 5680exploit
https://www.exploit-db.com/exploits/5680