CVE-2008-7178: Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrar...

Security readout for executives and security teams

CVE-2008-7178 is a directory traversal issue in Uploader module 1.1 for XOOPS. A remote attacker could use the file download function to read files outside the intended upload area. Business risk depends on whether this old XOOPS module is still deployed and what files the web server account can access. Exposure is most likely on legacy XOOPS installations that still run Uploader module 1.1 and expose its download functionality publicly. Modern environments are unlikely affected unless they retained this module or forked its code. Treat this as a legacy exposure cleanup item with potentially serious data disclosure impact. Prioritize internet-facing XOOPS systems, especially where sensitive configuration files may be readable by the web server. Mitigation focus: Inventory XOOPS sites for Uploader module 1.1 or inherited download code.; Check vendor or project guidance for any fixed release or replacement.; Disable the module if it is not business-critical..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.