CVE-2008-5272

CVE-2008-5272 concerns Fred Stuurman’s SyndeoCMS 2.6.0. It describes multiple directory traversal vulnerabilities exploitable by remote authenticated users to read arbitrary files via a .. path in the template parameter to three endpoints: starnet/editors/fckeditor/studenteditor.php; starnet/modu...