CVE-2008-6201

critical

Description

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information.

References

https://www.exploit-db.com/exploits/5449

https://exchange.xforce.ibmcloud.com/vulnerabilities/41950

http://www.vupen.com/english/advisories/2008/1241/references

http://www.securityfocus.com/bid/28788

http://www.securityfocus.com/archive/1/490861

http://secunia.com/advisories/29802

http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49

Details

Source: Mitre, NVD

Published: 2009-02-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.04259