CVE-2008-4319

Published: Sep 29, 2008Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

Affected (6)

Products: Libra File Manager: Php Filemanager

Libra File Manager

1 product

Php Filemanager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Libra File Manager Php Filemanager	Up to 1.18
Libra File Manager Php Filemanager	Version 1.00
Libra File Manager Php Filemanager	Version 1.03
Libra File Manager Php Filemanager	Version 1.05
Libra File Manager Php Filemanager	Version 1.08
Libra File Manager Php Filemanager	Version 1.17