CVE-2007-0804

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary…

published February 7, 2007

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02544 · 84.8th percentile
Published
2007-02-07T11:00Z
EPSS history
Timeline
  • 07 FEB 11:00Z
    Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary…
    cvelistv5