Unrated severityNVD Advisory· Published Jun 13, 2008· Updated Apr 23, 2026

CVE-2008-2699

Description

Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php.

Affected products

Gwm/Galatolo Webmanager
cpe:2.3:a:gwm:galatolo_webmanager:1.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/29595nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/42923nvd
www.exploit-db.com/exploits/5758nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000