CVE-2011-3837

Name of the Vulnerable Software and Affected Versions Wuzly version 2.0

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the preview parameter to "index.php".

Recommendations For Wuzly version 2.0, avoid using the preview parameter in the "index.php" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the "blog system/data functions.php" file to minimize the risk of exploitation.