Path Traversal in Jonascms

CVE-2008-5207

Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the taal parameter to (1) backup.php and (2) gb_voegtoe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

Affected products

  • Jonascms — versions 1.2
  • N/a — versions n/a

Weakness classification (CWE)

References