CVE-2007-2105

2007-04-1810:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.5%

JSON

Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the admin_skin parameter.

References

osvdb.org/35260

securityreason.com/securityalert/2578

www.securityfocus.com/archive/1/464704/100/0/threaded

www.securityfocus.com/archive/1/470801/100/100/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/33436