Security Advisory

CVE-2009-2223

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-06-26 15:00:00

Last updated 2024-08-07 05:44:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter. NOTE: remote file inclusion attacks may be possible.

← Browse all CVEs View on cve.org ↗