CVE-2007-5454

HIGH 7.5CVE-2007-5454 · Published 14/10/2007 · updated 16/06/2026

In short

CVE-2007-5454 is a HIGH (CVSS 7.5) vulnerability affecting php file sharing system (php file sharing system).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php file sharing system php_file_sharing_system	`= 1.5.1`	No fix yet

Description

Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a .. (dot dot) in the cam parameter.

References

archives.neohapsis.com/archives/fulldisclosure/2007-10/0343.html · Exploit
secunia.com/advisories/27257
securityfocus.com/bid/26065
exchange.xforce.ibmcloud.com/vulnerabilities/37193

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free