CVE-2008-6361 - Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter

Published Mar 2, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.85%

Description

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

http://www.securityfocus.com/bid/32783
vdb-entryx_refsource_BIDExploit
http://www.securityfocus.com/bid/32783/exploit
x_refsource_MISCExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6331
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47276
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7422
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/32783		vdb-entryx_refsource_BIDExploit
http://www.securityfocus.com/bid/32783/exploit		x_refsource_MISCExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6331		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47276		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7422		exploitx_refsource_EXPLOIT-DB