CVE-2007-3707

The CVE-2007-3707 entry concerns a directory traversal in CodeIgniter 1.5.3 prior to 20070628 when enable_query_strings is enabled. An attacker can read arbitrary files using a dot-dot in the c parameter, potentially exposing sensitive data. The vulnerability is triggered in index.php and is tied...