CVE-2007-6604

EPSS 3.6%

Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the s parameter to the admin page or (2) the pg parameter to an arbitrary module, as demonstrated by reading a password hash in a .dtb file under dati/membri/ or by executing embedded PHP code in images under uploads/avatar/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4802unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/40276 http://secunia.com/advisories/28256 https://exchange.xforce.ibmcloud.com/vulnerabilities/39281 https://exchange.xforce.ibmcloud.com/vulnerabilities/39282 https://www.exploit-db.com/exploits/4802 http://www.securityfocus.com/bid/27060