← Database

CVE-2008-2863

HIGH CVSS: 7.5 Published: 2008-06-25 Modified: 2026-06-16

Description

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.

Affected Platforms

Elinestudio Site Composer

Weakness Type

CWE-22

References