CVE-2008-3087: Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via...

Security readout for executives and security teams

Kasseler CMS 1.3.0 reportedly allows a remote attacker to read files from the server through a directory traversal flaw in an index.php file parameter. This can expose configuration files, credentials, or sensitive content if the CMS is reachable. The bundle does not name a fixed version or active exploitation. Exposure is likely limited to organizations still running Kasseler CMS 1.3.0, especially internet-facing sites with the affected index.php/phpManual path reachable. The provided affected metadata is incomplete and lists no CPEs, so asset owners should validate by software name, version, and deployed modules. Prioritize remediation if Kasseler CMS 1.3.0 is internet-facing or stores credentials on the host. The business risk is sensitive file exposure, not service outage. If no instances exist, record the finding as not applicable and monitor legacy asset inventories. Mitigation focus: Identify and prioritize any Kasseler CMS 1.3.0 deployments.; Check vendor or archived advisory guidance for a fixed release or official workaround.; Remove public access to affected CMS routes until remediation is confirmed..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.