CVE-2008-3723

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote...

6.3 MediumPublic exploit

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action. NOTE: some of these details are obtained from third party information.

Exploit likelihood

3.93%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used6.3

Record: CVE-2008-3723
CVSS 2.0: 6.3 MediumAV:N/AC:M/Au:S/C:C/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2008-3723
Updated: 2026-11-02

EUVDEUVD-2008-3709No score

Record: EUVD-2008-3709
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c2cw-3wxx-2cxvNo score

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote...

Record: GHSA-c2cw-3wxx-2cxv
Weakness: CWE-22
Updated: 2026-11-02

Affected products

phpizabi

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion	2008-08-15

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3723 is a medium vulnerability (CVSS 6.3) in Phpizabi, published August 20, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.93%, the 90th percentile. No source names a fixed version.