EDB-6247

functional

dotCMS 1.6 - 'id' Local File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor Donpublished 2008-08-15catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2008-3708US	medium4.3	4.64% (92nd)	Exploit	2008-08-19
Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) g…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.