CVE-2007-6508 Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.
HighCVSS 7.5
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xecms | = 1.0 | No fix listed |
References
- 44555 vdb-entry
- 3477 third-party-advisory
- 20071219 xeCMS 1.x.x Remote File Disclosure Vulnerability. mailing-list
- 26952 exploit vdb-entry
- xecms-view-directory-traversal(39151) vdb-entry
- 4758 exploit