CVE-2008-5794 Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
MediumCVSS 5.0
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lovecms | = 1.6.2 | No fix listed |
References
- 4834 third-party-advisory
- 32158 exploit vdb-entry
- lovecms-images-directory-traversal(46452) vdb-entry
- 7022 exploit