CVE-2008-6222
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Pro Desk Support Center是Jmoola组织开发的一个客户支持中心管理工具。 Joomla! Pro Desk Support Center (com_pro_desk)组件1.0版本和1.2版本中存在目录遍历漏洞。远程攻击者可以借助对index.php的include_file参数中的一个..，读取任意文件。
Public Exploits 3
Nuclei · 1
CVE-2008-6222.yaml [template]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-6222
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Joomlashowroom Pro Desk Support Center 'index.php'目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pro Desk Support Center是Jmoola组织开发的一个客户支持中心管理工具。 Joomla! Pro Desk Support Center (com_pro_desk)组件1.0版本和1.2版本中存在目录遍历漏洞。远程攻击者可以借助对index.php的include_file参数中的一个..，读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-6222
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Joomla! Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6222.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-6222
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-6222 (3)
Exploits & Public PoCs for CVE-2008-6222 (1)
Same Patch Batch · n/a · 2009-02-20 · 51 CVEs total
| CVE-2008-6203 | Jakob-Persson CoBaLT 'adminler.asp' SQL注入漏洞 | |
| CVE-2008-6209 | Vastal Software Zone 'view_product.php' SQL注入漏洞 | |
| CVE-2008-6195 | LANDesk Management Suite 服务PXE TFTP 目录遍历漏洞 | |
| CVE-2008-6196 | Philippe CROCHAT EasySite 多个远程文件包含漏洞 | |
| CVE-2008-6197 | KwsPHP Galerie Module "id_gal" Parameter SQL注入漏洞 | |
| CVE-2008-6198 | Mybboard MyBB Custom Pages模块 "pages" 参数 SQL注入漏洞 | |
| CVE-2008-6199 | 2532gigs权限许可和访问控制问题漏洞 | |
| CVE-2008-6212 | Php-Stats "admin.php" 多个跨站脚本攻击漏洞 | |
| CVE-2008-6205 | Xaaaaav38 URLStreet 'seeurl.php'跨站脚本攻击漏洞 | |
| CVE-2008-6204 | SuperNET Shop 多个远程文件SQL注入漏洞 | |
| CVE-2008-6206 | RobotStats 多个远程文件包含漏洞 | |
| CVE-2008-6202 | Jakob-Persson CoBaLT SQL注入漏洞 | |
| CVE-2008-6201 | KwsPHP Eskuel Module "help.php" 目录遍历漏洞 | |
| CVE-2008-6200 | Wiki Swiki多个跨站脚本攻击漏洞 | |
| CVE-2008-6219 | EMC NetWorker产品nsrexecd.exe RPC请求拒绝服务漏洞 | |
| CVE-2008-6218 | Libpng库png_handle_tEXt()内存泄露漏洞 | |
| CVE-2008-6217 | Extrakt Framework "index.php" 跨站脚本攻击漏洞 | |
| CVE-2008-6216 | Venalsur Booking Centre 'cadena_ofertas_ext.php' SQL注入"漏洞 | |
| CVE-2008-6215 | Venalsur Booking Centre 'cadena_ofertas_ext.php'跨站脚本攻击漏洞 | |
| CVE-2008-6214 | Harlandscripts Pro Traffic One "poll_results.php" SQL注入漏洞 |
Showing top 20 of 51 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-6222
No comments yet