medium5.0Public exploit code
CVE-2007-1138
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access2007-02-22 · webapps · php · Verified
Impact
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cromosoft | Simple Plantilla Php | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/33138
- http://securityreason.com/securityalert/2332
- http://www.securityfocus.com/archive/1/460913/100/0/threaded
- http://www.securityfocus.com/bid/22669
- http://osvdb.org/33138
- http://securityreason.com/securityalert/2332
- http://www.securityfocus.com/archive/1/460913/100/0/threaded
- http://www.securityfocus.com/bid/22669