VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 20, 2008· Updated Jun 16, 2026

CVE-2008-3723

CVE-2008-3723

Description

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Phpizabi/Phpizabi2 versions
    cpe:2.3:a:phpizabi:phpizabi:0.848b:c1_hfp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpizabi:phpizabi:0.848b:c1_hfp3:*:*:*:*:*:*
    • (no CPE)range: = 0.848b C1 HFP3
  • Phpizabi/index.phpllm-create
    Range: = 0.848b C1 HFP3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.