CVE-2008-0459

EPSS 1.9%

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the update parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4976unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/28619 https://exchange.xforce.ibmcloud.com/vulnerabilities/39895 https://www.exploit-db.com/exploits/4976 http://www.securityfocus.com/bid/27425 http://www.vupen.com/english/advisories/2008/0309