Vulnerability Details CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.043
EPSS Ranking 88.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/55182
- http://osvdb.org/55183
- http://secunia.com/advisories/35489
- http://www.securityfocus.com/bid/35418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51205
- https://www.exploit-db.com/exploits/8978
- http://osvdb.org/55182
- http://osvdb.org/55183
- http://secunia.com/advisories/35489
- http://www.securityfocus.com/bid/35418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51205
- https://www.exploit-db.com/exploits/8978
Products affected by CVE-2009-2176
-
cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a