CVE-2007-3523 Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) Ent or (2) Lang paramet...
MediumCVSS 6.4
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) Ent or (2) Lang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| groupeclan.free.fr xcms | = 1.1 | No fix listed |
References
- 38963 vdb-entry
- 24724 vdb-entry
- ADV-2007-2409 vdb-entry
- xcms-galerie-file-include(35191) vdb-entry
- 4131 exploit