CVE-2008-6833 Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a...
HighCVSS 10.0
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fuzzylime cms | = 3.0 | No fix listed |
| fuzzylime cms | = 3.0.1 | No fix listed |
| fuzzylime cms | = 3.0.1a | No fix listed |
References
- 49873 vdb-entry
- 30930 third-party-advisory vendor-advisory
- fuzzylimecms-commsrss-directory-traversal(43941) vdb-entry
- 6060 exploit