Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2008-1301 Public exploit

    Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter

    Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.