CVE-2007-6508 in xeCMS

Resumen (Inglés)

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2007-12-21

Divulgación

2007-12-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
40215	xeCMS view.php recorrido de directorios	22	Alto	Unavailable	CVE-2007-6508

Fuentes

• MITRE
• NVD
• CVE Details