CyberSec.Space Logo
Back to CVE Browser

CVE-2007-1138

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0850%
EPSS Percentile36.99th
PublishedMar 2, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter.

Affected Platforms (CPE)

📦
Cromosoft

Simple Plantilla Php

All versions

References & Advisories

🔗 http://osvdb.org/33138
🔗 http://securityreason.com/securityalert/2332
🔗 http://www.securityfocus.com/archive/1/460913/100/0/threaded
🔗 http://www.securityfocus.com/bid/22669
🔗 http://osvdb.org/33138
🔗 http://securityreason.com/securityalert/2332
🔗 http://www.securityfocus.com/archive/1/460913/100/0/threaded
🔗 http://www.securityfocus.com/bid/22669

Related Vulnerabilities

CVE-2007-113910.0

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...