CVE-2007-5820

CRITICAL 9.3CVE-2007-5820 · Published 05/11/2007 · updated 16/06/2026

In short

CVE-2007-5820 is a CRITICAL (CVSS 9.3) vulnerability affecting ax developer cms (ax developer cms).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ax developer cms ax_developer_cms	`= 0.1.1`	No fix yet

Description

Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.

References

osvdb.org/39021
securityfocus.com/bid/26306
vupen.com/english/advisories/2007/3749
exchange.xforce.ibmcloud.com/vulnerabilities/38224
exploit-db.com/exploits/4599

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free