CVE-2007-4957

EPSS 7.4%

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4411unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38881 http://osvdb.org/38882 http://secunia.com/advisories/26851 https://exchange.xforce.ibmcloud.com/vulnerabilities/36641 https://www.exploit-db.com/exploits/4411 http://www.securityfocus.com/bid/25681 http://www.vupen.com/english/advisories/2007/3180