CVE-2007-2539 The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.
HighCVSS 7.8
EPSS 7.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| runcms | <= 1.5.2 | No fix listed |
References
- 35783 vdb-entry
- retrogod.altervista.org
- 2671 third-party-advisory
- 20070504 RunCms <= 1.5.2 debug_show.php sql injection mailing-list
- 23819 patch vdb-entry
- ADV-2007-1669 vdb-entry
- 3850 exploit