CVE-2008-5272 Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/edito...
MediumCVSS 4.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, reached through starnet/index.php; and (3) starnet/modules/sn_newsletter/edit_content.php, reached through starnet/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| syndeocms | = 2.6.0 | No fix listed |
References
- 30602 third-party-advisory vendor-advisory
- 4660 third-party-advisory
- 29644 vdb-entry
- syndeocms-template-file-include(42969) vdb-entry
- 5779 exploit