CVE-2008-0184: Prenotazioni On Line Syshotel On Line System

Medium severity, CVSS 6.4. EPSS: 2.1% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" ("%2F") in the file parameter.

Affected products

• Prenotazioni On Line Syshotel On Line System: any version

Published 2008-01-09. Last modified 2026-06-16.