Irmin Cms

irmin_cms

Vendor: Ermenegildo Fiorito • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2010-1309

1Ermenegildo Fiorito

1Irmin Cms

Apr 29, 2026

Apr 8, 2010

N/A· v4

N/A· v3

5.0 MEDIUM· v2

Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (dot dot) in the w parameter to index.php.

CVE-2008-7254

1Ermenegildo Fiorito

1Irmin Cms

Apr 29, 2026

Apr 7, 2010

N/A· v4

N/A· v3

6.8 MEDIUM· v2

Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, when register_globals is enabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the _Root_Path parameter. NOTE: some of these details are obtained from third party information.Show less