CVE-2007-4180

Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbitrary local files…

published August 8, 2007

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbitrary local files via a .. (dot dot) in the file parameter. NOTE: CVE and a reliable third party dispute this vulnerability because the code uses a fixed argument when invoking fputs, which cannot be used to read files

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01479 · 73.5th percentile
Published
2007-08-08T01:11Z
EPSS history
Timeline
  • 08 AUG 01:11Z
    Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbitrary local files…
    cvelistv5