Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3312. PoCs published by Ciph3r.
AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) vulnerability in Lemon CMS 1.10, where an attacker can exploit improper input sanitization to traverse directories and read local files such as /etc/passwd. The exploit is demonstrated via a URL with directory traversal sequences.
Description
Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might be an issue in FCKeditor.
Exploits (1)
The provided text describes a local file inclusion (LFI) vulnerability in Lemon CMS 1.10, where an attacker can exploit improper input sanitization to traverse directories and read local files such as /etc/passwd. The exploit is demonstrated via a URL with directory traversal sequences.