medium5.0Public exploit code
CVE-2007-4895
Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sisfo Kampus 2006 - 'dwoprn.php?f' Arbitrary File Download2007-09-10 · webapps · php · Verified
Impact
Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sisfo Kampus | Sisfo Kampus | Version 2006 |