Security Advisory

CVE-2008-0559

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-04 22:00:00

Last updated 2024-08-07 07:46:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the permalink parameter in core.php, accessed through index.php; and (2) the thispost parameter in comments.php.

← Browse all CVEs View on cve.org ↗