Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-08-10T20:00:00

Updated: 2024-08-07T09:45:18.639Z

Reserved: 2008-08-10T00:00:00

Link: CVE-2008-3568

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-08-10T20:41:00.000

Modified: 2024-11-21T00:49:33.927

Link: CVE-2008-3568

cve-icon Redhat

No data.