CVEvulnerability
CVE-2007-5454
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. (dot dot) in the cam parameter.
Affected configurations
• php file sharing system php file sharing system 1.5.1
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0343.html Exploit
- http://secunia.com/advisories/27257 secunia.com
- http://www.securityfocus.com/bid/26065 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37193 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0343.html Exploit
- http://secunia.com/advisories/27257 secunia.com
- http://www.securityfocus.com/bid/26065 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37193 exchange.xforce.ibmcloud.com