Directory Traversal Vulnerability in Kai Content Management System by K-CMS
CVE-2007-2106

Currently unrated

Key Information:

Vendor: Kai Content Management System
Status: Kai Content Management System
Vendor: CVE Published:; 18 April 2007

🔔 Create Kai Content Management System Vulnerability Alert

What is CVE-2007-2106?

A directory traversal vulnerability exists in the index.php file of the Kai Content Management System (K-CMS) version 1.0. This flaw allows remote attackers to manipulate the current_theme parameter to include and execute arbitrary files on the server. By exploiting this vulnerability, attackers can compromise the integrity of the server and potentially access sensitive files, which can lead to further attacks or data breaches.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33437

vdb-entryx_refsource_XF

http://securityreason.com/securityalert/2579

third-party-advisoryx_refsource_SREASON

http://www.securityfocus.com/archive/1/464677/100/0/threaded

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 18, 2007
Vulnerability Reserved
Apr 17, 2007

CVE-2007-2106 Data

JSON