CVEvulnerability
CVE-2008-4319
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-287
Description
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.
Affected configurations
• libra file manager php filemanager (<= 1.18)
• libra file manager php filemanager 1.00
• libra file manager php filemanager 1.03
• libra file manager php filemanager 1.05
• libra file manager php filemanager 1.08
• libra file manager php filemanager 1.17
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.securityfocus.com/archive/1/496742 Exploit
- http://www.securityfocus.com/bid/31415 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45423 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6567 www.exploit-db.com
- http://www.securityfocus.com/archive/1/496742 Exploit
- http://www.securityfocus.com/bid/31415 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45423 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6567 www.exploit-db.com