cve/2007/CVE-2007-6528.md

CVE-2007-6528

Description

Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter.

POC

Reference

• http://securityreason.com/securityalert/3484
• https://www.exploit-db.com/exploits/4942

Github

No PoCs found on GitHub currently.