CVE-2008-6960

no score yetEPSS 7.0%

x10media x10 automatic mp3 script: no CVSS score yet. EPSS 7.0% chance of exploitation in the next 30 days.

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.

EPSS: 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-08-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

x10media:x10_automatic_mp3_script

References

http://osvdb.org/49797
http://secunia.com/advisories/32537
http://www.securityfocus.com/bid/32227
http://www.vupen.com/english/advisories/2008/3062
https://exchange.xforce.ibmcloud.com/vulnerabilities/46489

Check your stack JSON