CVE-2007-6552: Path Traversal

Published Dec 28, 2007

Updated

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection mechanism against direct request.

Affected Software

1 affected component

AuraCMS AuraCMS=2.2

Event History

Dec 28, 2007

CVE Published

12:46 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6552?

CVE-2007-6552 is considered a high severity vulnerability due to the potential for remote authenticated users to execute arbitrary local files.

How do I fix CVE-2007-6552?

To fix CVE-2007-6552, update AuraCMS to version 2.2.1 or later, which addresses this directory traversal vulnerability.

Who is affected by CVE-2007-6552?

CVE-2007-6552 affects users of AuraCMS version 2.2, specifically remote authenticated users.

What does CVE-2007-6552 allow an attacker to do?

CVE-2007-6552 allows an attacker to include and execute arbitrary local files through directory traversal.

What components are involved in CVE-2007-6552?

CVE-2007-6552 specifically involves the index.php file and the act parameter within the news pilih component.