CVE-2007-2104

HIGH 7.5CVE-2007-2104 · Published 18/04/2007 · updated 16/06/2026

In short

CVE-2007-2104 is a HIGH (CVSS 7.5) vulnerability affecting ixon cms (ixon cms).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ixon cms ixon_cms	`= 0.30`	No fix yet

Description

Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme_url parameter to (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) archives.php.

References

osvdb.org/35254
osvdb.org/35255
osvdb.org/35256
osvdb.org/35257
osvdb.org/35258
securityreason.com/securityalert/2577
securityfocus.com/archive/1/464675/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/33438

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free