CVE-2007-0919

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:C/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-09207.5SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands vCVE-2007-09219.4Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URICVE-2007-09224.3Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script orCVE-2007-09237.8buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed CVE-2007-09247.5Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request CVE-2007-09254.3Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web scCVE-2007-09267.5The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modifiCVE-2007-09277.5Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce headCVE-2007-09285.0Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadCVE-2007-09295.0Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the CVE-2007-09307.5Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknoCVE-2007-09317.5Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent Om
CVE-2007-0919: High severity, CVSS 7.8 | Vulnix