VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 2, 2008· Updated Apr 23, 2026

CVE-2008-2969

CVE-2008-2969

Description

Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter.

Affected products

2
  • Yektaweb/Academic Web Tools2 versions
    cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*range: <=1.4.2.8
    • cpe:2.3:a:yektaweb:academic_web_tools:1.4.3.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.