CVE-2007-6268

2007-12-0711:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

JSON

Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via a … (dot dot) in the template parameter.

References

marc.info/?l=bugtraq&m=119678724111351&w=2

osvdb.org/40575

secunia.com/advisories/27923

www.procheckup.com/Vulnerability_PR07-39.php

www.securityfocus.com/bid/26692

www.xigla.com/news/default.aspx

www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip

exchange.xforce.ibmcloud.com/vulnerabilities/38870