Security Advisory

CVE-2008-1301

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-03-12 17:00:00
Last updated 2024-08-07 08:17:34
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.