Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the s parameter to code/commupdate.php in a count action or (2) the heads parameter to code/newsheads.php. NOTE: the blog.php vector is already covered by CVE-2008-3164.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.exploit-db.com/exploits/6016 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-06-22T20:00:00
Updated: 2024-08-07T11:42:00.560Z
Reserved: 2009-06-22T00:00:00
Link: CVE-2008-6834
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-06-22T20:30:00.203
Modified: 2017-09-29T01:33:22.090
Link: CVE-2008-6834
Redhat
No data.