CVEvulnerability
CVE-2007-0804
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.
Affected configurations
• ggcms ggcms 1.1.0 rc1
References
- http://osvdb.org/35849 osvdb.org
- http://www.securityfocus.com/bid/22412 Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0492 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32211 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3271 www.exploit-db.com
- http://osvdb.org/35849 osvdb.org
- http://www.securityfocus.com/bid/22412 Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0492 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32211 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3271 www.exploit-db.com