CVE-2008-6833

Affected software: fuzzylime (cms) prior to version 3.01b, specifically the commsrss.php script. Vulnerability type & root cause: directory traversal/ local file inclusion via the files[] parameter in the blogs action, where input is not properly sanitized before being used in an include. Impact:...