CVE-2008-2838

Traindepot - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5848

Scores

EPSS 0.0382
EPSS Percentile 87.9%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

traindepot/traindepot

Timeline

Published Jun 24, 2008
Tracked Since Feb 18, 2026