Is CVE-2008-7054 being actively exploited?

CVE-2008-7054 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2008-7054?

CVE-2008-7054 has a CVSS 2.0 base score of 5.1 (MEDIUM).

CVE-2008-7054

MEDIUM · CVSS 5.1EPSS 7.0%EU EUVD

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the (1) gsLanguage and (2) language_home parameters to modules/diary/showdiary.php; (3) admin_home, (4) gsLanguage, and (5) language_home parameters to modules/diary/showdiarydetail.php; (6) gsLanguage and (7) language_home parameters to modules/diary/submit_diary.php; (8) admin_home parameter to modules/news/news_summary.php; (9) nLink, (10) gsLanguage, and (11) language_home parameters to modules/news/inlinenews.php; and possibly other unspecified vectors in (12) diary/showeventlist.php, (13) gallery/showgallery.php, (14) reviews/showreviews.php, (15) gallery/showgallerydetails.php, (16) reviews/showreviewsdetails.php, (17) news/shownewsdetails.php, (18) gallery/submit_gallery.php, (19) guestbook/submit_guestbook.php, (20) reviews/submit_reviews.php, (21) news/submit_news.php, (22) diary/inlineeventlist.php, and (23) news/archivednews_summary.php in modules/, related to the lack of directory traversal protection in modules/moduleSec.php.

Key facts

CVSS score: 5.1 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-22
EPSS score: 7.0% (94th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2008-7013)
Published: August 24, 2009
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2008-7013 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

visualshapers / ezcontents

References

http://secunia.com/advisories/31606(Vendor Advisory)
http://www.osvdb.org/47773(Exploit)
http://www.osvdb.org/47774(Exploit)
http://www.osvdb.org/47775(Exploit)
http://www.osvdb.org/47776(Exploit)
http://www.osvdb.org/47777(Exploit)
http://www.securityfocus.com/archive/1/495705/100/100/threaded
http://www.securityfocus.com/bid/30821(Exploit)
https://exchange.xforce.ibmcloud.com/vulnerabilities/44665
https://www.exploit-db.com/exploits/6301

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain