CVE-2008-0840

CVE-2008-0840 describes a directory traversal vulnerability in Public Warehouse LightBlog 9.6, specifically within the view_member.php component. This flaw allows remote attackers to include and execute arbitrary local files by manipulating the username parameter with a "../" sequence. The vulnerability has a CVSS score of 4.4, indicating a medium severity. It requires local access (AV:L) and medium attack complexity (AC:M), but successful exploitation can lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). While not listed on the KEV catalog or Metasploit, an exploit is publicly available on ExploitDB (EDB-5140). There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.