Back to search
CVE-2008-6960
Published: Aug 12, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
7074
exploit
x_refsource_EXPLOIT-DB
32227
vdb-entry
x_refsource_BID
32537
third-party-advisory
x_refsource_SECUNIA
ADV-2008-3062
vdb-entry
x_refsource_VUPEN
x10automaticmp3-url-info-disclosure(46489)
vdb-entry
x_refsource_XF
49797
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now