Vulnerabilities > CVE-2007-2324 - Directory Traversal vulnerability in Julmajanne Julmacms 1.4

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
julmajanne
exploit available
NVD
Published: 2007-04-27
Updated: 2017-10-11

Summary

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Julmajanne
1

Exploit-Db

descriptionJulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability. CVE-2007-2324. Webapps exploit for php platform
fileexploits/php/webapps/3799.txt
idEDB-ID:3799
last seen2016-01-31
modified2007-04-25
platformphp
port
published2007-04-25
reporterGoLd_M
sourcehttps://www.exploit-db.com/download/3799/
titleJulmaCMS 1.4 file.php file Remote File Disclosure Vulnerability
typewebapps

References