Path Traversal in Siteman

CVE-2008-2081

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.030 (86.2th percentile) — read the EPSS interpretation.

Affected products

  • Siteman — versions 2.0
  • N/a — versions n/a

Weakness classification (CWE)

References