CVE-2007-6528: Path Traversal
Published Dec 27, 2007
·Updated
Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter.
Affected Software
13 affected components
Tiki Wiki CMS Groupware=1.9.4
Tiki Wiki CMS Groupware<=1.9.8
Tiki Wiki CMS Groupware=1.9.0-rc2
Tiki Wiki CMS Groupware=1.9.3
Tiki Wiki CMS Groupware=1.9.0
Tiki Wiki CMS Groupware=1.6.1
Tiki Wiki CMS Groupware=1.9.5
Tiki Wiki CMS Groupware=1.9.0-rc1
Tiki Wiki CMS Groupware=1.9.0-rc3
Tiki Wiki CMS Groupware=1.9.6
Tiki Wiki CMS Groupware=1.9.2
Tiki Wiki CMS Groupware=1.9.1
Tiki Wiki CMS Groupware=1.9.7
Remediation
Patch Available
Event History
Dec 27, 2007
CVE Published
10:46 PM
Dec 28, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6528?
CVE-2007-6528 is classified as a medium severity vulnerability due to its potential to allow unauthorized file access.
2
How do I fix CVE-2007-6528?
To fix CVE-2007-6528, update TikiWiki to version 1.9.9 or later which addresses this vulnerability.
3
Which versions of TikiWiki are affected by CVE-2007-6528?
CVE-2007-6528 affects TikiWiki versions prior to 1.9.9, including all versions from 1.6.1 to 1.9.8.
4
What type of vulnerability is CVE-2007-6528?
CVE-2007-6528 is a directory traversal vulnerability allowing attackers to read arbitrary files.
5
Can I exploit CVE-2007-6528 remotely?
Yes, CVE-2007-6528 can be exploited remotely by attackers using specially crafted requests.