Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2008-0231 Details

Description

Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://securityreason.com/securityalert/3532 CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/39555 CVE
https://www.exploit-db.com/exploits/4876 CVE
http://www.securityfocus.com/archive/1/485991/100/0/threaded CVE
http://www.securityfocus.com/bid/27196 CVEExploit

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')[email protected]

Affected Products

ProductVersions

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2008-0231
NVD Published Date:
Jan 11, 2008
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2008-0231 Details - Not Deferred