CVE-2008-3371
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions...
CVE-2008-3371 is a high vulnerability (CVSS 7.5) in Talkback, published July 30, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.54%, the 89th percentile. No source names a fixed version.
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
- Record
CVE-2008-3371- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
- Record
CVE-2008-3371- Updated
- 2026-11-02
EUVDEUVD-2008-3358 No score
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
- Record
EUVD-2008-3358- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-97x3-pw87-2536 No score
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions...
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
- Record
GHSA-97x3-pw87-2536- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TalkBack 2.3.5 - 'Language' Local File Inclusion | 2008-07-28 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |