CVE-2008-6833

Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.

Link	Resource
http://secunia.com/advisories/30930	Vendor Advisory
http://osvdb.org/49873
https://exchange.xforce.ibmcloud.com/vulnerabilities/43941
https://www.exploit-db.com/exploits/6060

Configuration 1

cpe:2.3:a:fuzzylime:fuzzylime_(cms):3.0.1:*:*:*:*:*:*:* cpe:2.3:a:fuzzylime:fuzzylime_(cms):3.0:*:*:*:*:*:*:* cpe:2.3:a:fuzzylime:fuzzylime_(cms):3.0.1a:*:*:*:*:*:*:*

---

Published : 2009-06-22 08:30

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6833

Mitre link : CVE-2008-6833

Fuzzylime

CWE-22