Unrated severityNVD Advisory· Published Jan 7, 2009· Updated Jun 16, 2026

CVE-2008-5867

Description

Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Yerba/Yerba
cpe:2.3:a:yerba:yerba:6.3:*:*:*:*:*:*:*
Yerba/SACphpllm-fuzzy
Range: =6.3

Patches

Vulnerability mechanics

References

secunia.com/advisories/32093nvdVendor Advisory
www.securityfocus.com/bid/31619nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45733nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000