CVE-2007-2200 Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. (dot dot) in the asolute parameter.
HighCVSS 10.0
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. (dot dot) in the asolute parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pagode | = 0.5.8 | No fix listed |
References
- 35311 vdb-entry
- 35312 vdb-entry
- 24992 third-party-advisory
- 23617 vdb-entry
- ADV-2007-1512 vdb-entry
- pagode-navigatorok-directory-traversal(33848) vdb-entry
- 3783 exploit