Detections
Analytics
CVE-2008-6522
high
Description
Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka OpenTerracotta) 0.6.1, and possibly other versions, allow remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the (1) CurrentDirectory and (2) File parameters to index.php.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/41572
http://www.securityfocus.com/archive/1/490341/100/0/threaded