CVE-2008-6960

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 7.0%

exploitation probability

7.0%top 7% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7074

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/49797 http://secunia.com/advisories/32537 https://exchange.xforce.ibmcloud.com/vulnerabilities/46489 https://www.exploit-db.com/exploits/7074 http://www.securityfocus.com/bid/32227 http://www.vupen.com/english/advisories/2008/3062