CVE-2008-4358

SPAW Editor PHP Edition < 2.0.8.1 - Directory Traversal via Theme Name

Title source: llm

Description

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45104

Patch x_refsource_confirm

http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954

Product x_refsource_confirm

http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31185

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31796

Patch x_refsource_confirm

http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/

Scores

EPSS 0.0191

EPSS Percentile 77.4%

Details

CWE

CWE-20

Status published

Products (24)

spaw_editor/spaw_php 1.0 (3 CPE variants)

spaw_editor/spaw_php 1.0.1

spaw_editor/spaw_php 1.0.2

spaw_editor/spaw_php 1.0.3

spaw_editor/spaw_php 1.0.4

spaw_editor/spaw_php 1.0.5

spaw_editor/spaw_php 1.0.5a

spaw_editor/spaw_php 1.0.6

spaw_editor/spaw_php 1.0.7

spaw_editor/spaw_php 1.1 (3 CPE variants)

... and 14 more

Published Sep 30, 2008

Tracked Since Feb 18, 2026