First published: Wed May 09 2007(Updated: )
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rubrik parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mentiss Acgv Acgvannu | <=1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-2560 is classified as a medium severity vulnerability.
CVE-2007-2560 affects ACGVannu version 1.3 and earlier.
CVE-2007-2560 is a directory traversal vulnerability.
Attackers exploit CVE-2007-2560 by sending specially crafted requests that include .. (dot dot) in the rubrik parameter.
To mitigate CVE-2007-2560, upgrade to a later version of ACGVannu that is not affected.