CVE-2007-4031

Nessus Vulnerability Scanner <3.0.6 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.

Exploits (2)

exploitdb WORKING POC VERIFIED
by h07 · htmlremotewindows
https://www.exploit-db.com/exploits/4230
exploitdb WORKING POC
htmlremotewindows
https://www.exploit-db.com/exploits/4237

Scores

EPSS 0.0780
EPSS Percentile 92.0%

Details

CWE
CWE-22
Status published
Products (1)
nessus/vulnerability_scanner 3.0.6
Published Jul 27, 2007
Tracked Since Feb 18, 2026