CVE-2007-0804

Published: Feb 7, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.

Affected (1)

Products: Ggcms: Ggcms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ggcms Ggcms	Version 1.1.0_rc1

References (10)

http://osvdb.org/35849

Source: cve@mitre.org

http://www.securityfocus.com/bid/22412

Source: cve@mitre.org

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2007/0492

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32211

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3271

Source: cve@mitre.org

http://osvdb.org/35849

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22412

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2007/0492

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/32211

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3271

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.