CVE-2007-1042

Directory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

• CWE-22

• http://osvdb.org/33226
• http://secunia.com/advisories/24177Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32560
• http://osvdb.org/33226
• http://secunia.com/advisories/24177Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32560

Published

Feb 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1036The default configuration of JBoss does not restrict access …
• CVE-2007-1037Stack-based buffer overflow in News File Grabber 4.1.0.1 and…
• CVE-2007-1038Shemes.com Grabit 1.5.3, and possibly earlier, allows remote…
• CVE-2007-1039Unspecified vulnerability in Peanut Knowledge Base (PeanutKB…
• CVE-2007-1040Directory traversal vulnerability in archives.php in Xpressi…
• CVE-2007-1041Multiple stack-based buffer overflows in S&H Computer System…
• CVE-2007-1043Ezboo webstats, possibly 3.0.3, allows remote attackers to b…
• CVE-2007-1044Pearson Education PowerSchool 4.3.6 allows remote attackers …
• CVE-2007-1045mAlbum 0.3 has default accounts (1) "login"/"pass" for its a…
• CVE-2007-1046Dem_trac allows remote attackers to read log file contents v…
• CVE-2007-1047Unspecified vulnerability in Distributed Checksum Clearingho…
• CVE-2007-1048PHP remote file inclusion vulnerability in admin_rebuild_sea…