← Database

CVE-2008-0357

MEDIUM CVSS: 4.3 Published: 2008-01-18 Modified: 2026-06-16

Description

Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.

Affected Platforms

Galaxyscripts Mini File Host

Weakness Type

CWE-22

References