CVE-2008-3710: Hotscripts Cyboards PHP Lite

Medium severity, CVSS 5.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation.

Affected products

• Hotscripts Cyboards PHP Lite: version 1.21 only

Published 2008-08-19. Last modified 2026-06-16.