Unscored severity · published Sep 17, 2009
CVE-2008-7240
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files…
–
CVSS
6.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Php User Base · Linuxwebshop
1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7240
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7240
Exploit
http://www.securityfocus.com/bid/27964
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/40793
www.exploit-db.com
https://www.exploit-db.com/exploits/5179