CVE-2008-6833: Fuzzylime (cms)

High severity, CVSS 10.0. EPSS: 8.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter.

Affected products

• Fuzzylime Fuzzylime (cms): version 3.0 only; version 3.0.1 only; version 3.0.1a only

Published 2009-06-22. Last modified 2026-06-16.