Unrated severityNVD Advisory· Published Jul 2, 2008· Updated Jun 16, 2026
CVE-2008-2982
CVE-2008-2982
Description
Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) thumb_template parameter to (a) admin/templates/template_thumbnail.php, and the (2) language parameter to (b) account/account.php, (c) downloads/downloads.php, (d) forum/forum.php, (e) fotogalerie/delete.php, and (f) fotogalerie/fotogalerie.php in admin/features/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*
- (no CPE)range: 2.10 RC2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.