Description

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Remediation

References

CVE-2008-0612

Related Vulnerabilities

Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)

MongoDb Incorrect Authorization Vulnerability (CVE-2026-13068)

WordPress Plugin HK Exif Tags Cross-Site Scripting (1.11)

WordPress Plugin Secure HTML5 Video Player Cross-Site Scripting (3.14)

WordPress Plugin Widgets on Pages Cross-Site Scripting (1.6.0)

Severity

High

Classification

CVE-2008-0612 CWE-22

Tags

Missing Update Known Vulnerabilities