CVE-2007-4957

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a … (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a … (dot dot) in the (3) repertoire parameter.