CVE-2008-6361

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2009-03-02

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Feedcms (Insun Podcast)

References

• http://www.securityfocus.com/bid/32783
• http://www.securityfocus.com/bid/32783/exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47276
• https://www.exploit-db.com/exploits/7422