Path Traversal in All Club Cms

CVE-2008-0602

Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the class_name parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.

Affected products

All_club_cms
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)