CVE-2008-3708

EPSS 4.6%

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6247unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31516 http://securityreason.com/securityalert/4163 https://exchange.xforce.ibmcloud.com/vulnerabilities/44491 https://www.exploit-db.com/exploits/6247 http://www.securityfocus.com/bid/30703