Description

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot.

Remediation

References

CVE-2008-3708

Related Vulnerabilities

WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.12)

WordPress Plugin Sidebar Adder 2 Cross-Site Scripting (2.0.0)

WordPress Plugin QR Redirector Cross-Site Scripting (1.6)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0191)

PostgreSQL Other Vulnerability (CVE-2003-0901)

Severity

Medium

Classification

CVE-2008-3708 CWE-22

Tags

Missing Update Known Vulnerabilities