CVE-2008-7254

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, when register_globals is enabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the _Root_Path parameter. NOTE: some of these details are obtained from third party information.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/63348
http://packetstormsecurity.org/0808-exploits/pepsicms-rfi.txtExploit
http://secunia.com/advisories/39214Vendor Advisory
http://www.exploit-db.com/exploits/11938Exploit
http://osvdb.org/63348
http://packetstormsecurity.org/0808-exploits/pepsicms-rfi.txtExploit
http://secunia.com/advisories/39214Vendor Advisory
http://www.exploit-db.com/exploits/11938Exploit

Timeline

Published: Apr 7, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-72554.6login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers t CVE-2008-72561.2mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handl CVE-2008-72574.3CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software CVE-2008-72582.1The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) v CVE-2008-72612.1The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user c CVE-2008-72626.5Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary CVE-2008-72637.5ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remot CVE-2008-72644.0The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descrip CVE-2008-72654.0The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an CVE-2008-72664.3Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote a CVE-2008-72677.5SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id para CVE-2008-72685.0The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in m