CVE-2008-5856: Class

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter.

Affected products

• Class Class: up to and including 0.8.60; version 0.4 only; version 0.4.0 only; version 0.4.1 only; version 0.4.2 only; version 0.5.0 only; …

Published 2009-01-06. Last modified 2026-06-16.