CVE-2007-1930

EPSS 3.5%

Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. (dot dot) in the fn1 parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3677unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34736 http://secunia.com/advisories/24807 https://exchange.xforce.ibmcloud.com/vulnerabilities/33474 https://www.exploit-db.com/exploits/3677 http://www.securityfocus.com/bid/23390 http://www.vupen.com/english/advisories/2007/1297