How severe is CVE-2007-6400?

The severity of CVE-2007-6400 has not been assessed with CVSS v3.

CVE-2007-6400

Name: poldoc_document_management_system
Author: poldoc

NONE

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter.

Published: 12/17/2007Updated: 4/9/2025

Description

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter.

AI AnalysisPowered by AI

Affected Products

poldocpoldoc_document_management_system

0.96

Description

AI AnalysisPowered by AI

Affected Products

Available Exploits (1)

PolDoc CMS 0.96 - 'download_file.php' File Disclosure

References