CVE-2007-2836

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename that is marked for deletion at logout.

• CWE-22

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430691
• http://hikiwiki.org/en/advisory20070624.html
• http://hikiwiki.org/hiki-0_8_6.patch
• http://jvn.jp/jp/JVN%2305187780/index.html
• http://osvdb.org/37469
• http://secunia.com/advisories/25764Patch, Vendor Advisory
• http://secunia.com/advisories/25874Patch, Vendor Advisory
• http://www.debian.org/security/2007/dsa-1324
• http://www.securityfocus.com/bid/24603
• http://www.vupen.com/english/advisories/2007/2304
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35029
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430691
• http://hikiwiki.org/en/advisory20070624.html
• http://hikiwiki.org/hiki-0_8_6.patch
• http://jvn.jp/jp/JVN%2305187780/index.html
• http://osvdb.org/37469
• http://secunia.com/advisories/25764Patch, Vendor Advisory
• http://secunia.com/advisories/25874Patch, Vendor Advisory
• http://www.debian.org/security/2007/dsa-1324
• http://www.securityfocus.com/bid/24603
• http://www.vupen.com/english/advisories/2007/2304
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35029

Published

Jul 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2830The ath_beacon_config function in if_ath.c in MadWifi before…
• CVE-2007-2831Array index error in the (1) ieee80211_ioctl_getwmmparams an…
• CVE-2007-2832Cross-site scripting (XSS) vulnerability in the web applicat…
• CVE-2007-2833Emacs 21 allows user-assisted attackers to cause a denial of…
• CVE-2007-2834Integer overflow in the TIFF parser in OpenOffice.org (OOo) …
• CVE-2007-2835Multiple stack-based buffer overflows in (1) CCE_pinyin.c an…
• CVE-2007-2837The (1) getRule and (2) getChains functions in server/rules.…
• CVE-2007-2838The populate_conns function in src/populate_conns.c in GSAMB…
• CVE-2007-2839gfax 0.4.2 and probably other versions creates temporary fil…
• CVE-2007-2841Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-2843Cross-domain vulnerability in Apple Safari 2.0.4 allows remo…
• CVE-2007-2844PHP 4.x and 5.x before 5.2.1, when running on multi-threaded…