Back to CVE Browser

CVE-2007-6290

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.1680%

EPSS Percentile6.73th

PublishedDec 10, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) mod and (2) js parameters.

Affected Platforms (CPE)

📦

Iptel

Serweb

= 2.0.0dev1

References & Advisories

🔗 http://osvdb.org/39220

🔗 http://www.securityfocus.com/bid/26747

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/38907

🔗 https://www.exploit-db.com/exploits/4696

🔗 http://osvdb.org/39220

🔗 http://www.securityfocus.com/bid/26747

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/38907

🔗 https://www.exploit-db.com/exploits/4696

Related Vulnerabilities

CVE-2007-33586.8

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbit...

CVE-2007-33596.8

Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP cod...

CVE-2007-62896.8

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PH...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...