CVE-2009-2176

State: Published
Severity: Not scored
Published: Jun 23, 2009
Updated: Aug 7, 2024
Reserved: Jun 23, 2009

Description

Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

35418vdb-entry
55183vdb-entry
55182vdb-entry
8978exploit
fuzzylimecms-confirm-display-file-include(51205)vdb-entry
35489third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.