Directory traversal

2008-01-2516:00:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.9%

JSON

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the newlang parameter to index.php.

CPENameOperatorVersion
slaed_cmseq2.5.0-lite

CPE	Name	Operator	Version
	slaed_cms	eq	2.5.0-lite

References

www.securityfocus.com/bid/27426

www.vupen.com/english/advisories/2008/0308

exchange.xforce.ibmcloud.com/vulnerabilities/39897

www.exploit-db.com/exploits/4975