Back to Database
Status published
High
CVE-2008-2017
Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS)...
Vulnerability Description
Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the operation parameter to the default URI under install/.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-2017
Credits & Attribution
No credits recorded in the NVD database.
References
More from chilkat software
View All →CVE-2008-5002
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1)...
Critical
9.3
CVE-2008-4584
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll)...
Medium
6.8
CVE-2008-4583
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component...
High
7.5
CVE-2008-4343
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier...
Critical
9.3
CVE-2008-2016
PHP remote file inclusion vulnerability in Chilek Content Management System...
High
7.5
Affected Vendor
chilkat software
View all reports →Affected Software
chicomas
Vulnerable Versions:
2.0.4
Timeline
Official Publish:
April 30th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.