critical10.0Public exploit code
CVE-2008-6833
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution2008-07-13 · webapps · php · Verified
Impact
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fuzzylime | Fuzzylime \(Cms\) | Versions 3.0, 3.0.1, 3.0.1a |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/49873
- http://secunia.com/advisories/30930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43941
- https://www.exploit-db.com/exploits/6060
- http://osvdb.org/49873
- http://secunia.com/advisories/30930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43941
- https://www.exploit-db.com/exploits/6060