CVE-2007-1138

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-02 · updated 2026-06-16
Weakness: CWE-22

Description

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter.

Affected products

Cromosoft Simple Plantilla Php: all versions

References

http://osvdb.org/33138
http://securityreason.com/securityalert/2332
http://www.securityfocus.com/archive/1/460913/100/0/threaded
http://www.securityfocus.com/bid/22669
http://osvdb.org/33138
http://securityreason.com/securityalert/2332
http://www.securityfocus.com/archive/1/460913/100/0/threaded
http://www.securityfocus.com/bid/22669

Get alerted when CVE-2007-1138 or the next vulnerability affects your stack