CVE-2008-3589 Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilocms | = 1.10.1 | No fix listed |
References
- 31327 third-party-advisory vendor-advisory
- 4136 third-party-advisory
- 30526 vdb-entry
- mozilocms-download-directory-traversal(44162) vdb-entry
- 6194 exploit