CVE

Id
28177  
CVE No.
CVE-2007-4820  
Status
Candidate  
Description
Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments