CVE-2007-0804 | BDVDB-2026-22098 Detail

Description#

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via ".." sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2007/0492
https://exchange.xforce.ibmcloud.com/vulnerabilities/32211
http://www.securityfocus.com/bid/22412
https://www.exploit-db.com/exploits/3271
http://osvdb.org/35849

Exploit#

https://www.exploit-db.com/exploits/3271

History#

Version 12007-02-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.