{"id":"CVE-2008-0840","title":"Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitr","published":"2008-02-20T17:44:00.000Z","updated":"2026-06-16T18:50:27.360Z","severity":"medium","cvssScore":4.4,"epss":0.02369,"epssPct":0.84058,"kev":false,"maturity":"poc","actionScore":18,"primaryVendor":"publicwarehouse","primaryProduct":"lightblog","cweId":"CWE-22","fixAvailable":false,"tags":["rce","path-traversal"],"epssDelta7":0,"summary":"Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the username parameter.","cvssVector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-07T08:01:39.659Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:44:47.763Z","exploitdb":"2026-11-13T03:17:58.683Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":1,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"publicwarehouse","product":"lightblog","cpe":"cpe:2.3:a:publicwarehouse:lightblog"}],"references":[{"url":"http://secunia.com/advisories/29017","tags":"Vendor Advisory"},{"url":"http://www.securityfocus.com/archive/1/488283/100/0/threaded","tags":null},{"url":"http://www.vupen.com/english/advisories/2008/0621","tags":null}],"exploits":[{"source":"exploitdb","kind":"webapps","date":"2008-02-18"}],"analysis":null,"affectedVersions":[{"vendor":"publicwarehouse","product":"lightblog","version":"9.6","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}