VULNERABILITY INTELLIGENCE

CVE-2008-2217

CVSS score6.8 MEDIUM

EPSS probability1.85%

CISA KEVNot currently listed

Published2008-05-14

Last modified2026-06-16

Description

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cm_imgpath parameter.