CVE-2007-5454
Last modified
CVE-2007-5454 is a vulnerability of currently unknown severity. Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. (dot dot) in the cam parameter.. EPSS estimates a 1.55% chance of exploitation in the next 30 days.
Description
Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. (dot dot) in the cam parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Php File Sharing System | Php File Sharing System | 1.5.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-5454?
How severe is CVE-2007-5454?
How do I fix CVE-2007-5454?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-5448Madwifi 0.9.3.2 and earlier allows remote attackers to cause…
- CVE-2007-5449SQL injection vulnerability in searchresult.php in Softbiz R…
- CVE-2007-5450Unspecified vulnerability in Safari on the Apple iPod touch …
- CVE-2007-5451PHP remote file inclusion vulnerability in admin.color.php i…
- CVE-2007-5452Multiple SQL injection vulnerabilities in php-stats.recjs.ph…
- CVE-2007-5453Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2…
- CVE-2007-5455Cross-site scripting (XSS) vulnerability in wxis.exe in WWWI…
- CVE-2007-5456Microsoft Internet Explorer 7 and earlier allows remote atta…
- CVE-2007-5457Multiple PHP remote file inclusion vulnerabilities in Michae…
- CVE-2007-5458SQL injection vulnerability in index.php in the newsletter m…
- CVE-2007-5459Cross-site scripting (XSS) vulnerability in the sidebar HTML…
- CVE-2007-5460Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, use…4.6
Are you affected by CVE-2007-5454?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST