9.3crit
CVE-2007-60861 exploit
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via di…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.9%
percentile 87%
Public exploits
1
Exploit-DB
Summary
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.
Exploit prediction (EPSS)
2.94% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.
Exploits and detections
- EDB-4632 Vigile CMS 1.4 - Multiple Vulnerabilities · webapps · 2007-11-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
- exploit-db.com /exploits/4632 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /bid/26484 · vdb-entry, x_refsource_BID, x_transferred
- securityfocus.com /archive/1/483907/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/38557 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2007-6086
- NVD: CVE-2007-6086
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.