← Database

CVE-2008-7240

HIGH CVSS: 7.5 Published: 2009-09-17 Modified: 2026-06-16

Description

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.

Affected Platforms

Linuxwebshop Php User Base

Weakness Type

CWE-22, CWE-94

References