CVE-2008-3708

DotCMS 1.6.0.9 is affected by multiple directory traversal vulnerabilities that allow remote attackers to read arbitrary files by injecting a .. in the id parameter of news/index.dot and getting_started/macros/macros_detail.dot. The root cause is insufficient input sanitization in these scripts, ...

CVE-2008-3708

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. dot dot in the id parameter to 1 news/index.dot and 2 gettingstarted/macros/macrosdetail.dot...

CVE-2008-3708

creationtimestamp| type| source ---|---|--- 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6247...