CVE-2008-0393: Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to inclu...

Security readout for executives and security teams

GradMan 0.1.3 and earlier has a directory traversal/local file inclusion flaw in info.php. A remote attacker may be able to make the application include and execute local files. The public bundle does not provide CVSS, a vendor fix, or evidence of active exploitation. Exposure is most likely limited to legacy GradMan deployments where info.php is reachable over a network, especially public web servers. The source bundle does not provide CPEs, vendor ownership, or deployment prevalence. Treat this as a high-priority legacy exposure if GradMan is still deployed. The business risk is concentrated in old internet-facing systems, where a vulnerable PHP page could allow local file execution. Mitigation focus: Inventory any GradMan installations and identify versions at or below 0.1.3.; Check vendor or advisory guidance for an upgrade, patch, or retirement recommendation.; Remove public access to vulnerable GradMan pages if business use is not required..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.