CVE-2007-2507

CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...