CVE-2008-4913 Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lokicms | <= 0.3.3 | No fix listed |
| lokicms | = 0.1.0 | No fix listed |
| lokicms | = 0.1.0rc1 | No fix listed |
| lokicms | = 0.2.0 | No fix listed |
| lokicms | = 0.3.0 | No fix listed |
| lokicms | = 0.3.1b1 | No fix listed |
| lokicms | = 0.3.1b2 | No fix listed |
| lokicms | = 0.3.2b1 | No fix listed |
References
- lokicms.com
- 4554 third-party-advisory
- 28985 exploit vdb-entry
- lokicms-admin-directory-traversal(42247) vdb-entry
- 5522 exploit