CVE-2008-3036: Path Traversal
Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. (dot dot) in the template parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3036?
CVE-2008-3036 is categorized as a moderate severity vulnerability due to its ability to allow remote file inclusion.
How do I fix CVE-2008-3036?
To fix CVE-2008-3036, ensure that input validation is properly implemented on the template parameter to prevent directory traversal attacks.
What are the potential impacts of exploiting CVE-2008-3036?
Exploiting CVE-2008-3036 can lead to the execution of arbitrary local and potentially remote files, compromising the affected system.
What versions are affected by CVE-2008-3036?
CVE-2008-3036 specifically affects version 0.0.1 of CMS Little.
Is there a known exploit for CVE-2008-3036?
Yes, there are publicly available exploits for CVE-2008-3036 that demonstrate the directory traversal vulnerability.