high7.5Public exploit code
CVE-2008-4519
Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection2008-10-05 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the target parameter to (1) index2.php and (2) index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastpublish | Fastpublish Cms | Versions 1.9.9.9.9d, 1.9999d |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32126
- http://securityreason.com/securityalert/4383
- http://www.securityfocus.com/bid/31582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45673
- https://www.exploit-db.com/exploits/6678
- http://secunia.com/advisories/32126
- http://securityreason.com/securityalert/4383
- http://www.securityfocus.com/bid/31582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45673
- https://www.exploit-db.com/exploits/6678