CVE-2008-3723
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote...
CVE-2008-3723 is a medium vulnerability (CVSS 6.3) in Phpizabi, published August 20, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.93%, the 90th percentile. No source names a fixed version.
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.
- Record
CVE-2008-3723- CVSS 2.0
- 6.3 Medium
AV:N/AC:M/Au:S/C:C/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.
- Record
CVE-2008-3723- Updated
- 2026-11-02
EUVDEUVD-2008-3709 No score
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2008-3709- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c2cw-3wxx-2cxv No score
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote...
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.
- Record
GHSA-c2cw-3wxx-2cxv- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion | 2008-08-15 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt
exchange.xforce.ibmcloud.com/vulnerabilities/44509
securityfocus.com/bid/30707
secunia.com/advisories/31533
lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html
nvd.nist.gov/vuln/detail/CVE-2008-3723
github.com/advisories/GHSA-c2cw-3wxx-2cxv