CVE-2009-2223: Teozkr Lightopencms

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter. NOTE: remote file inclusion attacks may be possible.

Affected products

• Teozkr Lightopencms: version 0.1 only

Published 2009-06-26. Last modified 2026-06-16.