Directory traversal vulnerability in commsrss.php in fuzzylime (cms) prior to 3.01b allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fuzzylime fuzzylime \\(cms\\) 3.0.1a |
||
fuzzylime fuzzylime \\(cms\\) 3.0 |
||
fuzzylime fuzzylime \\(cms\\) 3.0.1 |