CVE-2008-1857

Published: Apr 16, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters.

Affected (1)

Products: Mole: Make Our Life Easy

Mole

1 product

Make Our Life Easy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mole Make Our Life Easy	Version 2.1.0

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (10)

http://secunia.com/advisories/29685

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/28659

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2008/1141/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41681

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5394

Source: cve@mitre.org

http://secunia.com/advisories/29685