CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4116

CVE-2009-4116 affects CuteNews/CutePHP 1.4.6. Multiple directory-traversal flaws allow remote authenticated users (editor or admin) to read arbitrary files via a .. in the source parameter for (1) list, (2) editnews, and (3) save_con[skin] in the Editnews/Options modules. Root cause noted when ma...