CVE-2007-5454

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-14 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. (dot dot) in the cam parameter.

Affected products

Php File Sharing System: 1.5.1

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0343.html
http://secunia.com/advisories/27257
http://www.securityfocus.com/bid/26065
https://exchange.xforce.ibmcloud.com/vulnerabilities/37193
http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0343.html
http://secunia.com/advisories/27257
http://www.securityfocus.com/bid/26065
https://exchange.xforce.ibmcloud.com/vulnerabilities/37193

Get alerted when CVE-2007-5454 or the next vulnerability affects your stack