CVE-2008-6361

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.85% chance of exploitation in the next 30 days, 78th percentile

Published

2009-03-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/7422

References

• CVE Record
• NVD entry

Related

• CVE-2008-6359
• CVE-2008-6362
• CVE-2008-6358
• CVE-2008-6363
• CVE-2008-6357
• CVE-2008-6364