CVE-2007-6187

Summary

Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filepath parameter to (1) css_file.php, (2) js_file.php, or (3) xml_file.php in noah/modules/nosystem/templates/.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://osvdb.org/39682
• http://osvdb.org/39683
• http://www.securityfocus.com/bid/26633
• http://osvdb.org/39684
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38727
• https://www.exploit-db.com/exploits/4675

References

• http://osvdb.org/39682
• http://osvdb.org/39683
• http://www.securityfocus.com/bid/26633
• http://osvdb.org/39684
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38727
• https://www.exploit-db.com/exploits/4675

• ←Previous
• Next→