CVE-2007-0804 in GGCMSinfo

Zusammenfassung

von MITRE

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

07.02.2007

Veröffentlichung

07.02.2007

Moderieren

akzeptiert

Eintrag

VDB-34868

CPE

bereit

Exploit

Download

EPSS

0.02421

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!