Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2008-3708 (dotcms)

BugsAlert Home > CVE-2008-3708 (dotcms)
 
 

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3708

Learn more about CVE-2008-3708 (dotcms)
 
Tags: cve-2008-3708 dotcms

Related Items

      MS08-014 - Critical: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029) - Version:1.1

      CVE-2008-0162 (Splitvt)

      More Fake News, More Malicious CNN Spam

      CVE-2008-3936 (dm500c)

      CVE-2008-5164 (the_rat_cms)

      FrSIRT - x10 Automatic MP3 Script "web_root" File Inclusion Vulnerabilities

      Whitelist

 

Pixel