← Database

CVE-2007-1140

CRITICAL CVSS: 9.4 Published: 2007-03-02 Modified: 2026-06-16

Description

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (dot dot) in the filename parameter.

Affected Platforms

Barekoncept Pheap

Weakness Type

CWE-22

References