CVEvulnerability
CVE-2008-2699
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php.
Affected configurations
• gwm galatolo webmanager 1.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securityfocus.com/bid/29595 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42923 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5758 www.exploit-db.com
- http://www.securityfocus.com/bid/29595 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42923 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5758 www.exploit-db.com