CVE-2008-6521

CVE-2008-6521 affects Terracotta/OpenTerracotta 0.6.1. The index.php vulnerable path allows remote attackers to obtain sensitive information via an invalid File parameter, revealing the installation path in an error message. Impact: information disclosure. Vector: network access to the vulnerable...

CVE-2008-6522

CVE-2008-6522 affects Terracotta (OpenTerracotta) 0.6.1 and possibly other versions. The vulnerability resides in the RenderFile function of ContentRender.class.php, enabling remote attackers to traverse directories and read arbitrary files by injecting a .. in the (1) CurrentDirectory or (2) Fil...