CVE-2008-2969: Yektaweb Academic Web Tools

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter.

Affected products

• Yektaweb Academic Web Tools: up to and including 1.4.2.8; version 1.4.3.1 only

Published 2008-07-02. Last modified 2026-06-16.