CVE-2008-3098

CVE-2008-3098 is a Cross-site scripting (XSS) flaw in fuzzylime CMS prior to 3.03 affecting admin/usercheck.php. The vulnerability allows remote attackers to inject arbitrary script via the login form's user parameter. According to the CVE notes, vendor remediation released version 3.03 on 2008-0...

CVE-2008-5291

CVE-2008-5291 is associated with fuzzylime CMS where code/track.php is vulnerable to Local File Inclusion via the p parameter. The OpenVAS entry confirms a directory traversal/LFI issue in fuzzylime cms code/track.php, enabling remote inclusion and execution of local files. The vulnerability deta...

CVE-2009-2177

Fuzzylime CMS exposes a directory traversal and arbitrary file overwrite via the s parameter (....// collapsing to ../) in code/display.php for versions 3.03a and earlier when magic_quotes_gpc is disabled, enabling remote access. No remediation details are provided in the supplied documents.

CVE-2009-2176

The provided connected documents confirm CVE-2009-2176 affects fuzzylime CMS, specifically versions 3.03a and earlier. The vulnerability is described as multiple directory traversal flaws that, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files ...

CVE-2008-3165

CVE-2008-3165 affects fuzzylime (CMS) versions 3.01a and earlier. The vulnerability is a directory traversal flaw in rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. sequence in the p parameter, demonstrated via content.php; this is a different v...

CVE-2008-3164

CVE-2008-3164 affects fuzzylime (cms) 3.01 (and 3.01a) with a directory traversal condition in blog.php. When magic_quotes_gpc is disabled, an attacker can supply a .. in the file parameter to cause the application to include and execute arbitrary local files. The vulnerability impact is remote c...