Path Traversal in Blueriver Mura Cms
CVE-2010-3468
Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, allows remote attackers to read arbitrary files via a .. (dot dot) in the FILEID parameter to the default URI under tasks/render/file/.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.
Affected products
- Blueriver Mura_cms — versions 5.2, 5.1
- Blueriver Sava_cms — versions 5.0.122, 5.0, 5.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)