CVEvulnerability
CVE-2007-4820
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter.
Affected configurations
• sisfo kampus sisfo kampus 2006
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/39017 osvdb.org
- http://www.securityfocus.com/bid/25605 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36533 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4380 www.exploit-db.com
- http://osvdb.org/39017 osvdb.org
- http://www.securityfocus.com/bid/25605 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36533 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4380 www.exploit-db.com