CVE-2007-3404

EPSS 2.9%

Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4105unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38603 https://exchange.xforce.ibmcloud.com/vulnerabilities/35055 https://www.exploit-db.com/exploits/4105 http://www.securityfocus.com/bid/24635 http://www.vupen.com/english/advisories/2007/2325