Description
Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot.
Remediation
References
Related Vulnerabilities
Jenkins Insufficient Verification of Data Authenticity Vulnerability (CVE-2015-7539)
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-7458)
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.15)
Drupal Session Fixation Vulnerability (CVE-2008-3222)
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.8)