EUVD-2007-4801

Malware in sbrugna...

CVE-2007-4820

CVE-2007-4820: Absolute path traversal in Sisfo Kampus 2006, via blanko.preview.php nmf parameter, allows remote reading of arbitrary local files and possible execution of local PHP scripts. Affected: Sisfo Kampus 2006 (blanko.preview.php). Root cause: improper path handling leading to traversal....

CVE-2007-4820: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter...