Logo
vulnerabilityCVE-2008-5728
Name
CVE-2008-5728
Source
NVD ( link)Debian ( link)
Description
Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
netcat
Exploitable

Vulnerability Rating#


5.1
CVSSv2

Others affected component#


Name
Project
Project Version
Version
Status
openwrt
openwrt-25.12
0.7.1-r2
Exploitable