← Database

CVE-2008-1415

MEDIUM CVSS: 5.0 Published: 2008-03-20 Modified: 2026-06-16

Description

Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to read arbitrary files via "../..//" (modified dot dot) sequences in the tab parameter.

Affected Platforms

Riceball Multiple Time Sheets

Weakness Type

CWE-22

References