Test ID:	1.3.6.1.4.1.25623.1.0.800314
Category:	Web application abuses
Title:	fuzzylime cms code/track.php Local File Inclusion Vulnerability
Summary:	fuzzylime CMS is prone to Local File Inclusion vulnerability.
Description:	Summary: fuzzylime CMS is prone to Local File Inclusion vulnerability. Vulnerability Insight: The flaw is caused due improper handling of input passed to p parameter in code/track.php file when the url, title and excerpt form parameters are set to non-null values. Vulnerability Impact: Successful exploitation will cause inclusion and execution of arbitrary files from local resources via directory traversal attacks. Affected Software/OS: fuzzylime cms version 3.03 and prior. Solution: Update to fuzzylime cms version 3.03a or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5291 BugTraq ID: 32475 http://www.securityfocus.com/bid/32475 https://www.exploit-db.com/exploits/7231 http://secunia.com/advisories/32865 http://securityreason.com/securityalert/4667 XForce ISS Database: fuzzylimecms-track-file-include(46841) https://exchange.xforce.ibmcloud.com/vulnerabilities/46841
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.