CVE-2007-5920

index.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include certain files via unspecified vectors, possibly due to a directory traversal vulnerability. NOTE: this can be leveraged to bypass authentication and upload files by including picoinsert.php or unspecified...

Directory traversal

index.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include certain files via unspecified vectors, possibly due to a directory traversal vulnerability. NOTE: this can be leveraged to bypass authentication and upload files by including picoinsert.php or unspecified...

CVE-2007-5920

CVE-2007-5920 affects PicoFlat CMS (pre-0.4.18). The issue allows remote attackers to include certain files via unspecified vectors, likely due to a directory traversal flaw, potentially bypassing authentication and enabling file uploads by including pico_insert.php or other admin scripts. The ex...