Unrated severityNVD Advisory· Published Mar 25, 2008· Updated Jun 16, 2026

CVE-2008-1512

Description

Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PhpBB/Module Xs2 versions
cpe:2.3:a:phpbb:module_xs:2.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpbb:module_xs:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpbb:module_xs:2.4.0:*:*:*:*:*:*:*
PhpBB/XS-Modllm-create
Range: 2.3.1, 2.4.0
PhpBB/eXtreme Styles module (XS-Mod)llm-fuzzy
Range: 2.3.1, 2.4.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/28432nvdExploit
secunia.com/advisories/29487nvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41404nvd
www.exploit-db.com/exploits/5301nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000