← Database

CVE-2008-5936

MEDIUM CVSS: 5.0 Published: 2009-01-22 Modified: 2026-06-16

Description

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.

Affected Platforms

Mini-Pub Mini-Pub

Weakness Type

CWE-200

References