Secunia Logo
 
CVE Reference: CVE-2008-0654
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-0654

Description:
Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _VIEW (view) parameter to (1) index.php, (2) html/sitio/index.php, or (3) src/sistema/vistas/template/tpl_inicio.php.

CVE Status:
Candidate

References:

SREASON
  http://securityreason.com/securityalert/3622

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/487595/100/0/threaded


Return to the previous page.