39017vdb entry
http://osvdb.org/39017 CVE-2007-4820
Sisfo Kampus 2006 - 'blanko.preview.php' Local File Disclosure
Record summary
CVE-2007-4820 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSisfo Kampus 2006 - 'blanko.preview.php' Local File DisclosureExploitDB exploitby QTRinuxNot analyzed1 file
References
525605vdb entry
http://www.securityfocus.com/bid/25605 sisfokampus-nmf-file-include(36533)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36533 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-4820 4380exploit
https://www.exploit-db.com/exploits/4380