Security Advisory

CVE-2007-4957

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-09-18 20:00:00
Last updated 2024-08-07 15:17:27
Assigner mitre
State PUBLISHED

Description

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter.