Unrated severityNVD Advisory· Published Sep 11, 2007· Updated Apr 23, 2026

CVE-2007-4820

Description

Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter.

Affected products

Sisfo Kampus/Sisfo Kampus
cpe:2.3:a:sisfo_kampus:sisfo_kampus:2006:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/25605nvdExploit
osvdb.org/39017nvd
exchange.xforce.ibmcloud.com/vulnerabilities/36533nvd
www.exploit-db.com/exploits/4380nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000