CVE coverage
View on NVD →
CVE-2008-2898
CVSS 9.3
2 detections found
Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the c_temp_path parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS Hedgehog CMS header.php c_temp_path Local File Inclusion | rev 9 | 2024-04-10 |
| snort | ET WEB_SPECIFIC_APPS Hedgehog CMS header.php c_temp_path Local File Inclusion | rev 4 | 2010-11-15 |