medium4.3Public exploit code
CVE-2008-3589
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- moziloCMS 1.10.1 - 'download.php' Arbitrary Download File2008-08-02 · webapps · php · Verified
Impact
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilo | Mozilocms | Version 1.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31327
- http://securityreason.com/securityalert/4136
- http://www.securityfocus.com/bid/30526
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44162
- https://www.exploit-db.com/exploits/6194
- http://secunia.com/advisories/31327
- http://securityreason.com/securityalert/4136
- http://www.securityfocus.com/bid/30526
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44162
- https://www.exploit-db.com/exploits/6194