Anantasoft · Anantasoft Gazelle Cms · CVE-2009-3181
**Name of the Vulnerable Software and Affected Versions**
Anantasoft Gazelle CMS version 1.0
**Description**
The issue allows remote attackers to overwrite arbitrary files by utilizing a directory traversal technique, specifically by including a .. (dot dot) in the `customizetemplate` parameter within a direct request to "admin/settemplate.php" API endpoint.
**Recommendations**
For Anantasoft Gazelle CMS version 1.0, as a temporary workaround, consider restricting access to the "admin/settemplate.php" endpoint and avoid using the `customizetemplate` parameter until a patch is available.