Unrated severityNVD Advisory· Published Sep 18, 2008· Updated Apr 23, 2026
CVE-2008-3195
CVE-2008-3195
Description
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.
Affected products
13cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: <=4.2.2
- cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195nvdPatch
- twiki.org/cgi-bin/view/Codev/TWikiRelease04x02x03nvdPatch
- www.kb.cert.org/vuls/id/362012nvdUS Government Resource
- secunia.com/advisories/31849nvd
- secunia.com/advisories/31964nvd
- securityreason.com/securityalert/4265nvd
- www.kb.cert.org/vuls/id/RGII-7JEQ7Lnvd
- www.vupen.com/english/advisories/2008/2586nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/45182nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/45183nvd
- www.exploit-db.com/exploits/6269nvd
News mentions
0No linked articles in our index yet.