CVE-2008-7176

CVE-2008-7176 affects Facil CMS 0.1RC and involves multiple directory traversal weaknesses that allow remote attackers to read arbitrary files via .. in the index.php change_lang parameter or the modules.php modload parameter. The NVD entry records this as a CVSS v2 base score of 6.8 ( MEDIUM ), ...

CVE-2008-7176

Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a .. dot dot in the 1 changelang parameter to index.php or 2 modload parameter to modules.php...