CVE-2008-5962: Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and e...

Security readout for executives and security teams

Gravity GTD 0.4.5 and earlier has a path traversal flaw in a setup RPC file. A remote attacker could use crafted input to make the application include and execute local files. The business risk is highest for old, internet-facing deployments that still expose this code. Likely limited to legacy Gravity Getting Things Done installations, especially version 0.4.5 and earlier, where library/setup/rpc.php remains reachable. Exposure evidence is incomplete because the bundle lists affected vendor and product as n/a despite naming Gravity GTD in the CVE description. Prioritize remediation if Gravity GTD is internet-facing or business-critical. This is an old vulnerability with public exploit references, but the provided evidence does not confirm active exploitation or an official patch path. Mitigation focus: Identify any Gravity GTD deployments and their versions.; Remove or replace Gravity GTD 0.4.5 and earlier where possible.; Check vendor or maintainer guidance for fixed versions or official mitigations..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.