CVE-2008-6361 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 1.8% (pctl 78)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 1.85% — more likely to be exploited than 78% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-03-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| insun podcast | feedcms |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Feed CMS 1.07.03.19b - 'lang' Local File Inclusion | 2008-12-11 |
References
- http://www.securityfocus.com/bid/32783
- http://www.securityfocus.com/bid/32783/exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47276
- https://www.exploit-db.com/exploits/7422
- http://www.securityfocus.com/bid/32783
- http://www.securityfocus.com/bid/32783/exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47276
- https://www.exploit-db.com/exploits/7422
→ the Explorer · watch your stack · NVD