CVE-2008-4602
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote...
CVE-2008-4602 is a medium vulnerability (CVSS 6.5) in Qualityunit Post Affiliate Pro, published October 17, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. No source names a fixed version.
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
- Record
CVE-2008-4602- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
- Record
CVE-2008-4602- Updated
- 2026-11-02
EUVDEUVD-2008-4582 No score
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
- Record
EUVD-2008-4582- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-99qf-p549-mmhm No score
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote...
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
- Record
GHSA-99qf-p549-mmhm- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Post Affiliate Pro 2.0 - 'md' Local File Inclusion | 2008-10-16 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |