CVE-2008-1325 in Uberghey CMS
Summary
by MITRE
Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 11/09/2025
The vulnerability described in CVE-2008-1325 represents a critical directory traversal flaw within the Uberghey CMS version 0.3.1, specifically affecting the index.php script. This vulnerability exposes the system to remote code execution attacks through improper input validation mechanisms that fail to sanitize user-supplied parameters. The flaw manifests when attackers manipulate the page_id and language parameters by injecting .. (dot dot) sequences, which allows them to traverse the file system hierarchy and access arbitrary local files on the server.
This directory traversal vulnerability falls under the CWE-22 category, which specifically addresses improper limitation of a pathname to a restricted directory, commonly known as path traversal or directory traversal. The vulnerability enables attackers to bypass normal access controls and potentially execute malicious code by including local files through the vulnerable parameters. The attack vector operates by exploiting the lack of proper input sanitization and validation in the CMS's parameter handling mechanisms, allowing unauthorized file access and execution capabilities.
The operational impact of this vulnerability is severe as it provides remote attackers with the capability to execute arbitrary code on the target system. Successful exploitation could result in complete system compromise, data theft, unauthorized access to sensitive information, and potential lateral movement within the network. Attackers could leverage this vulnerability to upload malicious files, establish backdoors, or gain administrative access to the CMS installation. The vulnerability affects the core functionality of the content management system and could lead to widespread security breaches if not addressed promptly.
The security implications extend beyond simple file access to include potential privilege escalation and persistent threats within the compromised environment. Organizations using Uberghey CMS 0.3.1 should immediately implement mitigations including input validation, parameter sanitization, and proper access controls. The recommended approach involves implementing strict input validation for all user-supplied parameters, particularly those used in file inclusion operations. Additionally, the system should enforce proper file access controls and implement the principle of least privilege to limit the potential damage from successful exploitation attempts. The vulnerability demonstrates the critical importance of proper input validation and access control mechanisms in preventing directory traversal attacks, aligning with ATT&CK technique T1059.007 for command and script injection. Organizations should also consider implementing web application firewalls and regular security assessments to detect and prevent similar vulnerabilities in their infrastructure.