Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3312

Опубликовано: 25 июл. 2008
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might be an issue in FCKeditor.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lemoncms:lemon_cms:1.10:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01839
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

debian
больше 17 лет назад

Directory traversal vulnerability in lemon_includes/FCKeditor/editor/f ...

github
почти 4 года назад

Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might be an issue in FCKeditor.

EPSS

Процентиль: 82%
0.01839
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22