CVE-2007-6376: Path Traversal
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6376?
CVE-2007-6376 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-6376?
To fix CVE-2007-6376, upgrade PHP-Nuke to a version that is not vulnerable, ensure proper input validation, and sanitize filename inputs.
What is the main risk associated with CVE-2007-6376?
The main risk associated with CVE-2007-6376 is that it allows attackers to execute arbitrary local files on the server.
Which software is affected by CVE-2007-6376?
CVE-2007-6376 affects PHP-Nuke version 8.0 final.
Can CVE-2007-6376 be exploited remotely?
Yes, CVE-2007-6376 can be exploited remotely by sending crafted requests to the vulnerable server.