Every CVE Search/ Get API key

CVE-2008-1325

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote...

7.5 HighPublic exploit

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

Exploit likelihood

2.39%Down 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

Record
CVE-2008-1325
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

Record
CVE-2008-1325
Updated
2026-11-02
EUVDEUVD-2008-1332 No score

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

Record
EUVD-2008-1332
Updated
2026-11-03
GitHub AdvisoriesGHSA-j8q5-wx9w-2f7c No score

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote...

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.

Record
GHSA-j8q5-wx9w-2f7c
Weakness
CWE-22
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBUberghey CMS 0.3.1 - 'index.php' Multiple Local File Inclusions2008-03-12

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1325 is a high vulnerability (CVSS 7.5) in Leinir Turthra Uberghey Cms, published March 13, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.39%, the 84th percentile. No source names a fixed version.

References

MoveEnter Open