CVE-2007-0088

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src parameter to page.php or the (2) format parameter to search_form.php.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 5, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-00897.5jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00907.5WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dataCVE-2007-00917.5newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a daCVE-2007-00927.5SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the producCVE-2007-00937.5SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands viCVE-2007-00947.5Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2007-00955.0phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, wCVE-2007-00967.5CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloaCVE-2007-00979.3Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerACVE-2007-00986.8Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers CVE-2007-00999.3Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remoteCVE-2007-010010.0The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote atta
CVE-2007-0088: Medium severity, CVSS 5.0 | Vulnix