CVE-2008-4358

CRITICAL 10.0CVE-2008-4358 · Published 30/09/2008 · updated 16/06/2026

In short

CVE-2008-4358 is a CRITICAL (CVSS 10.0) vulnerability affecting spaw php (spaw editor).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spaw php spaw_editor	`= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.5a= 1.0.6= 1.0.7= 1.1= 1.2= 1.2.1= 1.2.2= 1.2.3= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.4.1= 2.0.5= 2.0.6= 2.0.7≤ 2.0.8`	No fix yet

Description

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.

References

blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release · Patch
secunia.com/advisories/31796 · Vendor Advisory
sourceforge.net/project/shownotes.php · Patch
spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php
securityfocus.com/bid/31185
exchange.xforce.ibmcloud.com/vulnerabilities/45104

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free