CVE-2008-3128

CVE-2008-3128 describes a directory traversal vulnerability in Pivot 1.40.5, specifically within the search.php component. An unauthenticated remote attacker can exploit this by manipulating the 't' parameter to read arbitrary files on the server. The vulnerability has a CVSS score of 5.0 (medium severity) due to its low attack complexity and potential for partial confidentiality impact, allowing information disclosure. While there is an ExploitDB entry (EDB-5973) detailing a credentials disclosure scenario, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.