CVE-2008-6834

CRITICAL 10.0CVE-2008-6834 · Published 22/06/2009 · updated 16/06/2026

In short

CVE-2008-6834 is a CRITICAL (CVSS 10.0) vulnerability affecting fuzzylime (cms) (fuzzylime).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fuzzylime (cms) fuzzylime	`= 3.0.1= 3.0.1a`	No fix yet

Description

Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the s parameter to code/commupdate.php in a count action or (2) the heads parameter to code/newsheads.php. NOTE: the blog.php vector is already covered by CVE-2008-3164.

References

exploit-db.com/exploits/6016

More vulnerabilities in fuzzylime (cms)

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free