CVE-2009-3181

Name of the Vulnerable Software and Affected Versions Anantasoft Gazelle CMS version 1.0

Description The issue allows remote attackers to overwrite arbitrary files by utilizing a directory traversal technique, specifically by including a .. (dot dot) in the customizetemplate parameter within a direct request to "admin/settemplate.php" API endpoint.

Recommendations For Anantasoft Gazelle CMS version 1.0, as a temporary workaround, consider restricting access to the "admin/settemplate.php" endpoint and avoid using the customizetemplate parameter until a patch is available.