CVE-2007-3251

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary local files via a .

published June 18, 2007

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the adminlang cookie to admin/functions.php or (2) read arbitrary local files via the img parameter to admin/show_img.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03987 · 90.5th percentile
Published
2007-06-18T10:00Z
EPSS history
Timeline
  • 18 JUN 10:00Z
    Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary local files via a .
    cvelistv5