Vulnerability Database

296,335

Total vulnerabilities in the database

CVE-2008-4913

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.

Published: Nov 4, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-4913
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-22

OWASP TOP 10:

A5 - Broken Access Control

Affected Software
References

Software	From	Fixed in
lokicms / lokicms	0.2.0	0.2.0.x
lokicms / lokicms	0.3.0	0.3.0.x
lokicms / lokicms	0.3.1b1	0.3.1b1.x
lokicms / lokicms	0.3.1b2	0.3.1b2.x
lokicms / lokicms	-	0.3.3.x
lokicms / lokicms	0.3.2b1	0.3.2b1.x
lokicms / lokicms	0.1.0rc1	0.1.0rc1.x
lokicms / lokicms	0.1.0	0.1.0.x