{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-01-09T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via \"..\" sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "4876", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/4876"}, {"name": "27196", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27196"}, {"name": "tunedstudiostemplates-index-file-include(39555)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39555"}, {"name": "20080109 LFI in Tuned Studios Templates", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/485991/100/0/threaded"}, {"name": "3532", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3532"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-0231", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via \"..\" sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "4876", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/4876"}, {"name": "27196", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27196"}, {"name": "tunedstudiostemplates-index-file-include(39555)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39555"}, {"name": "20080109 LFI in Tuned Studios Templates", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/485991/100/0/threaded"}, {"name": "3532", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3532"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:39:34.235Z"}, "title": "CVE Program Container", "references": [{"name": "4876", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/4876"}, {"name": "27196", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27196"}, {"name": "tunedstudiostemplates-index-file-include(39555)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39555"}, {"name": "20080109 LFI in Tuned Studios Templates", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/485991/100/0/threaded"}, {"name": "3532", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3532"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-0231", "datePublished": "2008-01-11T00:00:00", "dateReserved": "2008-01-10T00:00:00", "dateUpdated": "2024-08-07T07:39:34.235Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tuned_studios:classic_theme:*:*:*:*:*:*:*:*", "matchCriteriaId": "B039A91A-CD08-4797-BCC8-26CCA314B3FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:endless:*:*:*:*:*:*:*:*", "matchCriteriaId": "14A4ADC9-9FF0-4FD8-A0EB-D9A00EC4D489", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:freeze_theme:*:*:*:*:*:*:*:*", "matchCriteriaId": "899816A8-C7E8-41E3-B915-6560DFFC8640", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:lonely_maple:*:*:*:*:*:*:*:*", "matchCriteriaId": "5FD526F0-FA78-45E9-AB9A-8D14B510D204", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:music_theme:*:*:*:*:*:*:*:*", "matchCriteriaId": "46B54A5E-D11C-4ACD-AB76-37B7D77B13E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:orange_cutout:*:*:*:*:*:*:*:*", "matchCriteriaId": "E042281B-A23C-4D1C-8988-08AC480F499F", "vulnerable": true}, {"criteria": "cpe:2.3:a:tuned_studios:subwoofer:*:*:*:*:*:*:*:*", "matchCriteriaId": "93467A28-7A77-468F-B625-6F6383656728", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via \"..\" sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de salto de directorio en el archivo index.php en las plantillas de p\u00e1ginas web de Tuned Studios: (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, y (7) Music Theme, permiten a atacantes remotos incluir y ejecutar archivos arbitrarios por medio de secuencias \"..\" en el par\u00e1metro page. NOTA: esto puede ser aprovechado para la inclusi\u00f3n de archivos remota cuando se ejecuta en algunos entornos PHP 5."}], "id": "CVE-2008-0231", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-01-11T00:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3532"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/485991/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/27196"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39555"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/4876"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3532"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/485991/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/27196"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39555"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/4876"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}