VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 17, 2009· Updated Jun 16, 2026

CVE-2008-7240

CVE-2008-7240

Description

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Linux Web Shop/PHP User Base2 versions
    cpe:2.3:a:linuxwebshop:php_user_base:1.3:beta:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:linuxwebshop:php_user_base:1.3:beta:*:*:*:*:*:*
    • (no CPE)range: = 1.3beta

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.