Test ID:	1.3.6.1.4.1.25623.1.0.802984
Category:	Web application abuses
Title:	Limny admin/preview.php theme Parameter Directory Traversal Vulnerability
Summary:	Limny is prone to a directory traversal vulnerability.
Description:	Summary: Limny is prone to a directory traversal vulnerability. Vulnerability Insight: Input passed via 'theme' parameter to admin/preview.php is not properly sanitised before being used to include files. Vulnerability Impact: Successful exploitation could allow attackers to perform directory traversal attacks and read arbitrary files on the affected application. Affected Software/OS: Limny version 3.0.0 Solution: Upgrade to Limny version 3.0.1 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5210 http://www.autosectools.com/Advisories/Limny.3.0.0_Local.File.Inclusion_99.html http://www.osvdb.org/70747 http://secunia.com/advisories/43124 XForce ISS Database: limny-preview-file-include(65083) https://exchange.xforce.ibmcloud.com/vulnerabilities/65083
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.