Unscored CVE-2007-2105 EUVD-2007-2100GHSA-vv6p-4rgx-3484

Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local fil…

Published Apr 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the admin_skin parameter.

References

35260 vdb-entry
20070404 Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy mailing-list
20070607 Re: Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy mailing-list
2578 third-party-advisory
monkeycms-index-file-include(33436) vdb-entry