CVE-2008-1512

Name of the Vulnerable Software and Affected Versions eXtreme Styles module (XS-Mod) versions 2.3.1 through 2.4.0

Description The issue allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter of the admin/admin xs.php file. This is a directory traversal vulnerability.

Recommendations For versions 2.3.1 and 2.4.0, consider restricting access to the admin/admin xs.php file until a fix is available. As a temporary workaround, avoid using the phpEx parameter in the affected file to minimize the risk of exploitation.