Unscored severity · published Mar 2, 2007
CVE-2007-1158
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a
–
CVSS
4.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Pagesetter · Postnuke Software Foundation
6.2; 6.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1158
marc.info
http://marc.info/?l=full-disclosure&m=117251821622820&w=2
marc.info
http://marc.info/?l=full-disclosure&m=117256698219502&w=2
osvdb.org
http://osvdb.org/33781
Patch
http://secunia.com/advisories/24299
securityreason.com
http://securityreason.com/securityalert/2336
www.elfisk.dk
http://www.elfisk.dk/index.php?module=pagesetter&func=viewpub&tid=7&pid=125