Test ID:	1.3.6.1.4.1.25623.1.0.900460
Category:	Web application abuses
Title:	Jaws CMS Directory Traversal Vulnerability
Summary:	Jaws CMS is prone to a Directory Traversal Vulnerability.
Description:	Summary: Jaws CMS is prone to a Directory Traversal Vulnerability. Vulnerability Insight: This flaw is due to an error in file 'index.php' in 'language' parameter which lets the attacker execute local file inclusion attacks. Vulnerability Impact: Successful exploitation will let the attacker execute local file inclusion attacks and gain sensitive information about the remote system directories where Jaws CMS runs. Affected Software/OS: Jaws CMS 0.8.8 and prior Solution: Upgrade to the latest version 0.8.9. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0645 BugTraq ID: 33607 http://www.securityfocus.com/bid/33607 https://www.exploit-db.com/exploits/7976 http://www.jaws-project.com/blog/show/jaws-089-released XForce ISS Database: jaws-index-file-include(48476) https://exchange.xforce.ibmcloud.com/vulnerabilities/48476
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.