CVE-2011-5210: Limny

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the theme parameter.

Affected products

• Limny Limny: version 3.0.0 only

Published 2012-10-09. Last modified 2026-06-16.