VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 2, 2008· Updated Jun 16, 2026

CVE-2008-2969

CVE-2008-2969

Description

Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Yektaweb/Academic Web Tools2 versions
    cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*range: <=1.4.2.8
    • cpe:2.3:a:yektaweb:academic_web_tools:1.4.3.1:*:*:*:*:*:*:*
  • Academic Web Tools/AWT YEKTAllm-fuzzy
    Range: <=1.4.2.8, 1.4.3.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.