CVE-2008-3555
Wsn (Multiple Products) - Local File Inclusion / Code Execution
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences.
Una vulnerabilidad de salto de directorio en el archivo index.php en (1) WSN Forum versión 4.1.43 y anteriores, (2) Gallery versión 4.1.30 y anteriores, (3) Knowledge Base (WSNKB) versión 4.1.36 y anteriores, (4) Links versión 4.1.44 y anteriores, y posiblemente (5) Classifieds anterior a versión 4.1.30, permite a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro TID, como es demostrado mediante la carga de un archivo .jpg que contiene secuencias de PHP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-08-08 CVE Reserved
- 2008-08-08 CVE Published
- 2024-06-04 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/31392 | Third Party Advisory | |
| http://securityreason.com/securityalert/4120 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/44236 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/6208 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wsn Search vendor "Wsn" | Forum Search vendor "Wsn" for product "Forum" | <= 4.1.43 Search vendor "Wsn" for product "Forum" and version " <= 4.1.43" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Gallery Search vendor "Wsn" for product "Gallery" | <= 4.1.30 Search vendor "Wsn" for product "Gallery" and version " <= 4.1.30" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Knowledge Base Search vendor "Wsn" for product "Knowledge Base" | <= 4.1.36 Search vendor "Wsn" for product "Knowledge Base" and version " <= 4.1.36" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.0 Search vendor "Wsn" for product "Links" and version "4.0.0" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.1 Search vendor "Wsn" for product "Links" and version "4.0.1" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.2 Search vendor "Wsn" for product "Links" and version "4.0.2" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.3 Search vendor "Wsn" for product "Links" and version "4.0.3" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.4 Search vendor "Wsn" for product "Links" and version "4.0.4" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.5 Search vendor "Wsn" for product "Links" and version "4.0.5" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.6 Search vendor "Wsn" for product "Links" and version "4.0.6" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.7 Search vendor "Wsn" for product "Links" and version "4.0.7" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.8 Search vendor "Wsn" for product "Links" and version "4.0.8" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.9 Search vendor "Wsn" for product "Links" and version "4.0.9" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.10 Search vendor "Wsn" for product "Links" and version "4.0.10" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.11 Search vendor "Wsn" for product "Links" and version "4.0.11" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.12 Search vendor "Wsn" for product "Links" and version "4.0.12" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.13 Search vendor "Wsn" for product "Links" and version "4.0.13" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.14 Search vendor "Wsn" for product "Links" and version "4.0.14" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.15 Search vendor "Wsn" for product "Links" and version "4.0.15" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.16 Search vendor "Wsn" for product "Links" and version "4.0.16" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.17 Search vendor "Wsn" for product "Links" and version "4.0.17" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.18 Search vendor "Wsn" for product "Links" and version "4.0.18" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.19 Search vendor "Wsn" for product "Links" and version "4.0.19" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.20 Search vendor "Wsn" for product "Links" and version "4.0.20" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.21 Search vendor "Wsn" for product "Links" and version "4.0.21" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.22 Search vendor "Wsn" for product "Links" and version "4.0.22" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.23 Search vendor "Wsn" for product "Links" and version "4.0.23" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.24 Search vendor "Wsn" for product "Links" and version "4.0.24" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.25 Search vendor "Wsn" for product "Links" and version "4.0.25" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.26 Search vendor "Wsn" for product "Links" and version "4.0.26" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.27 Search vendor "Wsn" for product "Links" and version "4.0.27" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.28 Search vendor "Wsn" for product "Links" and version "4.0.28" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.29 Search vendor "Wsn" for product "Links" and version "4.0.29" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.30 Search vendor "Wsn" for product "Links" and version "4.0.30" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.31 Search vendor "Wsn" for product "Links" and version "4.0.31" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.32 Search vendor "Wsn" for product "Links" and version "4.0.32" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.33 Search vendor "Wsn" for product "Links" and version "4.0.33" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.34 Search vendor "Wsn" for product "Links" and version "4.0.34" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.35 Search vendor "Wsn" for product "Links" and version "4.0.35" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.36 Search vendor "Wsn" for product "Links" and version "4.0.36" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.37 Search vendor "Wsn" for product "Links" and version "4.0.37" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.38 Search vendor "Wsn" for product "Links" and version "4.0.38" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.39 Search vendor "Wsn" for product "Links" and version "4.0.39" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.40 Search vendor "Wsn" for product "Links" and version "4.0.40" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.0.41 Search vendor "Wsn" for product "Links" and version "4.0.41" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.0 Search vendor "Wsn" for product "Links" and version "4.1.0" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.1 Search vendor "Wsn" for product "Links" and version "4.1.1" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.2 Search vendor "Wsn" for product "Links" and version "4.1.2" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.3 Search vendor "Wsn" for product "Links" and version "4.1.3" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.4 Search vendor "Wsn" for product "Links" and version "4.1.4" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.5 Search vendor "Wsn" for product "Links" and version "4.1.5" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.6 Search vendor "Wsn" for product "Links" and version "4.1.6" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.7 Search vendor "Wsn" for product "Links" and version "4.1.7" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.8 Search vendor "Wsn" for product "Links" and version "4.1.8" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.9 Search vendor "Wsn" for product "Links" and version "4.1.9" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.10 Search vendor "Wsn" for product "Links" and version "4.1.10" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.11 Search vendor "Wsn" for product "Links" and version "4.1.11" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.12 Search vendor "Wsn" for product "Links" and version "4.1.12" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.13 Search vendor "Wsn" for product "Links" and version "4.1.13" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.14 Search vendor "Wsn" for product "Links" and version "4.1.14" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.15 Search vendor "Wsn" for product "Links" and version "4.1.15" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.16 Search vendor "Wsn" for product "Links" and version "4.1.16" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.17 Search vendor "Wsn" for product "Links" and version "4.1.17" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.18 Search vendor "Wsn" for product "Links" and version "4.1.18" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.19 Search vendor "Wsn" for product "Links" and version "4.1.19" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.20 Search vendor "Wsn" for product "Links" and version "4.1.20" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.21 Search vendor "Wsn" for product "Links" and version "4.1.21" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.22 Search vendor "Wsn" for product "Links" and version "4.1.22" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.23 Search vendor "Wsn" for product "Links" and version "4.1.23" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.24 Search vendor "Wsn" for product "Links" and version "4.1.24" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.25 Search vendor "Wsn" for product "Links" and version "4.1.25" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.26 Search vendor "Wsn" for product "Links" and version "4.1.26" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.27 Search vendor "Wsn" for product "Links" and version "4.1.27" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.28 Search vendor "Wsn" for product "Links" and version "4.1.28" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.29 Search vendor "Wsn" for product "Links" and version "4.1.29" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.30 Search vendor "Wsn" for product "Links" and version "4.1.30" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.31 Search vendor "Wsn" for product "Links" and version "4.1.31" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.32 Search vendor "Wsn" for product "Links" and version "4.1.32" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.33 Search vendor "Wsn" for product "Links" and version "4.1.33" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.34 Search vendor "Wsn" for product "Links" and version "4.1.34" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.35 Search vendor "Wsn" for product "Links" and version "4.1.35" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.36 Search vendor "Wsn" for product "Links" and version "4.1.36" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.37 Search vendor "Wsn" for product "Links" and version "4.1.37" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.38 Search vendor "Wsn" for product "Links" and version "4.1.38" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.39 Search vendor "Wsn" for product "Links" and version "4.1.39" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.40 Search vendor "Wsn" for product "Links" and version "4.1.40" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.41 Search vendor "Wsn" for product "Links" and version "4.1.41" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.42 Search vendor "Wsn" for product "Links" and version "4.1.42" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.43 Search vendor "Wsn" for product "Links" and version "4.1.43" | - |
Affected
| ||||||
| Wsn Search vendor "Wsn" | Links Search vendor "Wsn" for product "Links" | 4.1.44 Search vendor "Wsn" for product "Links" and version "4.1.44" | - |
Affected
| ||||||