Unrated severityNVD Advisory· Published Feb 24, 2009· Updated Jun 16, 2026

CVE-2008-6253

Description

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the g_pcltar_lib_dir parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pluck/Pluck2 versions
cpe:2.3:a:pluck-cms:pluck:4.5.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pluck-cms:pluck:4.5.3:*:*:*:*:*:*:*
- (no CPE)range: =4.5.3

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/498438nvdExploit
secunia.com/advisories/32736nvdVendor Advisory
www.pluck-cms.org/index.phpnvdVendor Advisory
www.securityfocus.com/bid/32342nvd
exchange.xforce.ibmcloud.com/vulnerabilities/46676nvd
www.exploit-db.com/exploits/7153nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000