CVE-2007-1449: Medium severity Phpnuke Php-nuke vulnerability
Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1449?
CVE-2007-1449 is considered to have a high severity due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2007-1449?
To fix CVE-2007-1449, it is recommended to update PHP-Nuke to version 8.1 or later, which includes patches for this vulnerability.
Which versions of PHP-Nuke are affected by CVE-2007-1449?
CVE-2007-1449 affects PHP-Nuke versions 8.0 and earlier, including versions 7.0 through 8.0.
What type of attack does CVE-2007-1449 enable?
CVE-2007-1449 enables an attacker to perform directory traversal attacks, allowing them to read arbitrary files on the server.
Are there any known exploits for CVE-2007-1449?
Yes, there are known exploits for CVE-2007-1449 that demonstrate how attackers can leverage the vulnerability to access restricted files.