← Vulnerability feed

Vulnerability record · CVE-2007-0205 · published 11 January 2007

CVE-2007-0205: Alexphpteam alex guestbook path traversal vulnerability

AAlexphpteam · Alex Guestbook

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in the (1) aj_skin and (2) skin_edit parameters. NOTE: this can be leveraged for file inclusion by creating a skin file in the lang directory, then referencing that file via the lang parameter to index.php, which passes a sanity check in livre_include.php.

7.5 CVSS 2.0 High EPSS 3.3% · top 11.8% CWE-22 · Path traversal
7.5CVSS 2.0 base score
3.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in the (1) aj_skin and (2) skin_edit parameters. NOTE: this can be leveraged for file inclusion by creating a skin file in the lang directory, then referencing that file via the lang parameter to index.php, which passes a sanity check in livre_include.php.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://acid-root.new.fr/poc/20070107.txt Exploit
http://osvdb.org/31708
http://osvdb.org/31709
http://securityreason.com/securityalert/2135
http://www.securityfocus.com/archive/1/456218/100/0/threaded
http://www.securityfocus.com/bid/21926
https://exchange.xforce.ibmcloud.com/vulnerabilities/31397
https://www.exploit-db.com/exploits/3103
http://acid-root.new.fr/poc/20070107.txt Exploit
http://osvdb.org/31708
http://osvdb.org/31709
http://securityreason.com/securityalert/2135
http://www.securityfocus.com/archive/1/456218/100/0/threaded
http://www.securityfocus.com/bid/21926
https://exchange.xforce.ibmcloud.com/vulnerabilities/31397
https://www.exploit-db.com/exploits/3103

Track CVE-2007-0205 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2007-0202Alexphpteam alex guestbook vulnerabilitySQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute a…EPSS 3.8%7.5CVE-2004-1554Alexphpteam alex guestbook vulnerabilityPHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the…EPSS 7.3%6.8CVE-2006-6278Alexphpteam alex guestbook vulnerabilityCross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the …EPSS 1.4%5.0CVE-2006-6279Alexphpteam alex guestbook vulnerabilityindex.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which …EPSS 1.5%9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%10.0CVE-2026-85706GitLab CE/EE repository commits API path traversal allows unauthenticated file readGitLab CE/EE contains improper path confinement and missing authentication enforcement in the repository commits API, allowing an unauthenticated use…KEVEPSS 91%analysed5.3CVE-2026-66384JFrog Artifactory path traversal in Docker cache pathAn authenticated user can write data outside the intended Docker cache path under specific remote-repository conditions in JFrog Artifactory. The fla…KEVEPSS 0.66%analysed9.8CVE-2026-59310VMware vCenter Syslog server path traversal leads to RCEVMware vCenter's Syslog server is affected by a directory traversal flaw (CWE-22) that allows a remote, unauthenticated attacker to execute arbitrary…KEVEPSS 2.6%analysed

Source: NIST National Vulnerability Database (record CVE-2007-0205), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.