Unrated severityNVD Advisory· Published Nov 21, 2008· Updated Jun 16, 2026
CVE-2008-5204
CVE-2008-5204
Description
Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to (1) agb.php, (2) angemeldet.php, (3) anmelden.php, (4) charts.php, (5) external_vote.php, (6) guestbook.php, (7) impressum.php, (8) index.php, (9) rss-reader.php, (10) statistic.php, (11) teilnehmer.php, (12) topsites.php, (13) votecode.php, (14) voting.php, and (15) winner.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:poweraward:poweraward:1.1.0:rc1:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:poweraward:poweraward:1.1.0:rc1:*:*:*:*:*:*
- (no CPE)range: =1.1.0 RC1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.