CVE-2007-5174

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the do parameter...

CVE-2007-5174

Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the do parameter...

CVE-2007-5174

CVE-2007-5174 describes a directory traversal vulnerability in actSite 1.56, exploitable via phpinc/news.php by providing a .. in the do parameter to include and execute local files. The NVD entry confirms the flaw, with a CVSS 2.0 base score of 7.5 (HIGH) and impact on confidentiality, integrity...