CVE-2007-1140

2007-02-2718:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

JSON

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a … (dot dot) in the filename parameter.

References

osvdb.org/33140

securityreason.com/securityalert/2354

www.securityfocus.com/archive/1/460920/100/0/threaded

www.securityfocus.com/bid/22670