CVE-2008-3710

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.29%

Published

Aug 19, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation.

Weaknesses (CWE)

CWE-22

Affected Products (1)

hotscripts · cyboards_php_litevulnerable

References (8)

http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt

Exploit

http://www.attrition.org/pipermail/vim/2008-August/002052.html

http://www.securityfocus.com/bid/30688

https://exchange.xforce.ibmcloud.com/vulnerabilities/44475

http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt

Exploit

http://www.attrition.org/pipermail/vim/2008-August/002052.html

http://www.securityfocus.com/bid/30688

https://exchange.xforce.ibmcloud.com/vulnerabilities/44475

KEV Catalog EPSS Scores Vendors All CVEs