CVE-2008-3150

KRITISCH 10.0CVE-2008-3150 · Published 11/07/2008 · updated 16/06/2026

Kurz gesagt

CVE-2008-3150 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in atomic edition (neutrino-cms).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.3%, höher als bei 93.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
atomic edition neutrino-cms	`= 0.8.4`	No fix yet

Description

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.

References

secunia.com/advisories/30950 · Vendor Advisory
securityfocus.com/bid/30123
exchange.xforce.ibmcloud.com/vulnerabilities/43616
exploit-db.com/exploits/6018

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free