CVE-2007-2960

Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin_name parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/, a different vector than CVE-2007-2900. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

• http://osvdb.org/38039
• http://osvdb.org/38040
• http://osvdb.org/38041
• http://www.vupen.com/english/advisories/2007/1933
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34469
• http://osvdb.org/38039
• http://osvdb.org/38040
• http://osvdb.org/38041
• http://www.vupen.com/english/advisories/2007/1933
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34469

Published

May 31, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2954Multiple stack-based buffer overflows in the Spooler service…
• CVE-2007-2955Multiple unspecified "input validation error" vulnerabilitie…
• CVE-2007-2956Stack-based buffer overflow in the readRadianceHeader functi…
• CVE-2007-2957Integer overflow in McAfee E-Business Server before 8.5.3 fo…
• CVE-2007-2958Format string vulnerability in the inc_put_error function in…
• CVE-2007-2959SQL injection vulnerability in manufacturer.php in cpCommerc…
• CVE-2007-2961Unrestricted file upload vulnerability in FileCloset before …
• CVE-2007-2962Cross-site scripting (XSS) vulnerability in search.php in Pa…
• CVE-2007-2963Multiple cross-site scripting (XSS) vulnerabilities in Invis…
• CVE-2007-2964The fsmsh.dll host module in F-Secure Policy Manager Server …
• CVE-2007-2965Unspecified vulnerability in the Real-time Scanning componen…
• CVE-2007-2966Buffer overflow in the LHA decompression component in F-Secu…