CVE-2008-0464

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7...

5.0 MediumPublic exploit

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.

Exploit likelihood

3.32%Down 3.5 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2008-0464
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-0464
Updated: 2026-11-02

EUVDEUVD-2008-0474 No score

Record: EUVD-2008-0474
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5v7g-8gw8-v4x9 No score

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7...

Record: GHSA-5v7g-8gw8-v4x9
Weakness: CWE-22
Updated: 2026-11-02

Affected products

absofort aconon mail enterprise sql

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Aconon Mail 2004 - Directory Traversal	2008-01-23

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0464 is a medium vulnerability (CVSS 5.0) in Absofort Aconon Mail Enterprise Sql, published January 25, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.32%, the 88th percentile. No source names a fixed version.