Unscored CVE-2007-2106 EUVD-2007-2101GHSA-85c3-2hxr-wjr2

Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute …

Published Apr 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the current_theme parameter.

References

kcms-index-file-include(33437) vdb-entry
2579 third-party-advisory
20070404 K-CMS v1.0 Remote File Include Vulnerabilities mailing-list