CVE-2008-2482

Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter in a go action.

Affected products

Nonecms

Insanevisions Onecms

= 2.5

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

2.8% (85th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2008-05-28