CVE-2008-6668: Dirk Bartley NWEB2FAX

Medium severity, CVSS 5.0. EPSS: 14% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php.

Affected products

• Dirk Bartley NWEB2FAX: up to and including 0.2.7; version 0.2 only

Published 2009-04-08. Last modified 2026-06-16.