CVE-2008-4346 in TalkBack

Sumário (Inglês)

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

30/09/2008

Divulgação

30/09/2008

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
44269	TalkBack comments.php Travessia de Diretório	22	Prova de conceito	Unavailable	CVE-2008-4346

Fontes

• MITRE
• NVD
• CVE Details