CVE-2007-6400

NONE

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter.

Опубликовано: 12/17/2007Обновлено: 4/9/2025

Описание

Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter.

ИИ-АнализНа базе ИИ

Затронутые продукты

poldocpoldoc_document_management_system
0.96

Доступные эксплойты (1)

Ссылки