CVE-2007-0804

2007-02-0711:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to inject arbitrary PHP code into arbitrary files via “…” sequences in the subpageName parameter, as demonstrated by injecting PHP code into a template file.