CVE-2008-0822: Scribe

Low severity, CVSS 3.6. EPSS: 2.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (dot dot) in the page parameter.

Affected products

• Scribe Scribe: version 0.2 only

Published 2008-02-19. Last modified 2026-06-16.