CVE-2007-0700

Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this issue was later reported for 2.5.1.1.

• CWE-22

• http://osvdb.org/33634
• http://www.attrition.org/pipermail/vim/2007-February/001269.htmlExploit
• http://www.attrition.org/pipermail/vim/2007-February/001280.html
• http://www.attrition.org/pipermail/vim/2007-February/001281.html
• http://www.securityfocus.com/archive/1/458805/100/0/threaded
• http://www.securityfocus.com/bid/22361Exploit
• http://www.securityfocus.com/bid/27962
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32115
• https://www.exploit-db.com/exploits/5182
• http://osvdb.org/33634
• http://www.attrition.org/pipermail/vim/2007-February/001269.htmlExploit
• http://www.attrition.org/pipermail/vim/2007-February/001280.html
• http://www.attrition.org/pipermail/vim/2007-February/001281.html
• http://www.securityfocus.com/archive/1/458805/100/0/threaded
• http://www.securityfocus.com/bid/22361Exploit
• http://www.securityfocus.com/bid/27962
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32115
• https://www.exploit-db.com/exploits/5182

Published

Feb 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0694Cross-site scripting (XSS) vulnerability in footer.php in DG…
• CVE-2007-0695Multiple SQL injection vulnerabilities in Free LAN In(tra|te…
• CVE-2007-0696Cross-site scripting (XSS) vulnerability in error messages i…
• CVE-2007-0697index2.php in ACGVannu 1.3 and earlier allows remote attacke…
• CVE-2007-0698Multiple SQL injection vulnerabilities in ACGVannu 1.3 and e…
• CVE-2007-0699PHP remote file inclusion vulnerability in includes/includes…
• CVE-2007-0701PHP remote file inclusion vulnerability in inc/common.inc.ph…
• CVE-2007-0702Multiple PHP remote file inclusion vulnerabilities in phpEve…
• CVE-2007-0703PHP remote file inclusion vulnerability in library/StageLoad…
• CVE-2007-0704PHP remote file inclusion vulnerability in install.php in So…
• CVE-2007-0705Cross-zone scripting vulnerability in Sleipnir 2.49 and earl…
• CVE-2007-0706Cross-zone scripting vulnerability in Darksky RSS bar for In…