Back to Database
Status published
Critical
CVE-2008-6833
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b...
Vulnerability Description
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6833
Credits & Attribution
No credits recorded in the NVD database.
References
More from fuzzylime
View All →CVE-2009-2177
code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is...
Medium
6.8
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier,...
High
7.5
CVE-2008-6834
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a...
Critical
10
CVE-2008-5291
Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote...
High
7.5
CVE-2008-3165
Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and...
Medium
6.8
Affected Vendor
fuzzylime
View all reports →Affected Software
fuzzylime \(cms\)
Vulnerable Versions:
3.0, 3.0.1, 3.0.1a
Timeline
Official Publish:
June 22nd, 2009
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.