Vulnerabilities > CVE-2007-2155 - Directory Traversal vulnerability in PHPFaber TopSites Admin/

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
phpfaber
exploit available
NVD
Published: 2007-04-19
Updated: 2018-10-16

Summary

Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the modify parameter in a template action to admin/index.php.

Vulnerable Configurations

Part Description Count
Application
Phpfaber
1

Exploit-Db

descriptionPHPFaber TopSites 3 Admin/Index.PHP Directory Traversal Vulnerability. CVE-2007-2155. Webapps exploit for php platform
idEDB-ID:29841
last seen2016-02-03
modified2007-04-11
published2007-04-11
reporterDr.RoVeR
sourcehttps://www.exploit-db.com/download/29841/
titlePHPFaber TopSites 3 Admin/Index.PHP Directory Traversal Vulnerability

References