CVE-2008-3939

CVSS 7.5 HIGHEPSS 1.7%CWE-22

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Sep 2008Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html http://secunia.com/advisories/31693 http://www.securityfocus.com/bid/30987