CVE-2008-5883: Mini-Pub

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter.

Affected products

• Mini-Pub Mini-Pub: up to and including 0.3; version 0.1 only; version 0.1.1 only; version 0.1.2 only

Published 2009-01-12. Last modified 2026-06-16.